Imatix Xitami Post Request Header Remote Denial Of Service Vulnerability

Bugtraq ID:	9083
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 21 2003 12:00AM
Updated:	Nov 21 2003 12:00AM
Credit:	Discovery credited to Tri Huynh.
Vulnerable:	Imatix Xitami 2.5 c0 Imatix Xitami 2.5 b6 Imatix Xitami 2.5 b5 Imatix Xitami 2.5 b4 Imatix Xitami 2.5 - Compaq OpenVMS 7.3 VAX - Compaq OpenVMS 7.3 Alpha - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Imatix Xitami 2.4 d9 Imatix Xitami 2.4 d4 Imatix Xitami 2.4 d3 Imatix Xitami 2.4 d10 Imatix Xitami 2.4 d10 Imatix Xitami 2.4 c3 Imatix Xitami 2.4 b1 - Compaq OpenVMS 7.3 VAX - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Imatix Xitami 2.4 b - Compaq OpenVMS 7.3 VAX - Compaq OpenVMS 7.3 Alpha - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Imatix Xitami 2.4 a1 - Compaq OpenVMS 7.3 VAX - Compaq OpenVMS 7.3 Alpha - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Imatix Xitami 2.4 - Compaq OpenVMS 7.3 VAX - Compaq OpenVMS 7.3 Alpha - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Imatix Xitami Post Request Header Remote Denial Of Service Vulnerability

A problem has been identified in the handling of certain types of requests by Imatix Xitami. Because of this, it is possible for a remote attacker to deny service to legitimate users of a vulnerable server.

Imatix Xitami Post Request Header Remote Denial Of Service Vulnerability

No exploit is required for this vulnerability.

Imatix Xitami Post Request Header Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Imatix Xitami Post Request Header Remote Denial Of Service Vulnerability

References:

• Xitami Homepage (iMatix)
  
• Xitami Denial of Service in Handling malformed request ("Tri Huynh" )