Centrinity FirstClass HTTP Server Long Version Field Denial Of Service Vulnerability
BID:8793
Info
Centrinity FirstClass HTTP Server Long Version Field Denial Of Service Vulnerability
| Bugtraq ID: | 8793 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2003 12:00AM |
| Updated: | Oct 08 2003 12:00AM |
| Credit: | Discovery credited to Aurelien BOUDOUX and Fred CHAVEROT. |
| Vulnerable: |
Centrinity FirstClass 7.1 Centrinity FirstClass 7.0 Centrinity FirstClass 5.77 0 Centrinity FirstClass 5.50 |
| Not Vulnerable: | |
Discussion
Centrinity FirstClass HTTP Server Long Version Field Denial Of Service Vulnerability
A problem has been reported in the handling of overly long HTTP version string data by Centrinity FirstClass. Because of this, it may be possible for an attacker deny service to legitimate users of a vulnerable system. This may be due to an exploitable boundary condition error, though this is not confirmed.
A problem has been reported in the handling of overly long HTTP version string data by Centrinity FirstClass. Because of this, it may be possible for an attacker deny service to legitimate users of a vulnerable system. This may be due to an exploitable boundary condition error, though this is not confirmed.
Exploit / POC
Centrinity FirstClass HTTP Server Long Version Field Denial Of Service Vulnerability
No exploit is required for this vulnerability. The following proof-of-concept has been made available by Aurelien BOUDOUX and Fred CHAVEROT.
No exploit is required for this vulnerability. The following proof-of-concept has been made available by Aurelien BOUDOUX and Fred CHAVEROT.
Solution / Fix
Centrinity FirstClass HTTP Server Long Version Field Denial Of Service Vulnerability
Solution:
The vendor has released a fix to address this issue:
Centrinity FirstClass 5.50
Centrinity FirstClass 5.77 0
Centrinity FirstClass 7.0
Centrinity FirstClass 7.1
Solution:
The vendor has released a fix to address this issue:
Centrinity FirstClass 5.50
-
Centrinity FirstClass 7.1 Service Pack 4
http://www.firstclass.com/Downloads/Server/Windows%20Download%20Page
Centrinity FirstClass 5.77 0
-
Centrinity FirstClass 7.1 Service Pack 4
http://www.firstclass.com/Downloads/Server/Windows%20Download%20Page
Centrinity FirstClass 7.0
-
Centrinity FirstClass 7.1 Service Pack 4
http://www.firstclass.com/Downloads/Server/Windows%20Download%20Page
Centrinity FirstClass 7.1
-
Centrinity FirstClass 7.1 Service Pack 4
http://www.firstclass.com/Downloads/Server/Windows%20Download%20Page