OSVDB ID: 15004 Title: Trillian Multiple Plug-in HTTP Response Header Overflow DoS |
Info |
|
|
Dates |
||||
|
|
Description |
A remote overflow exists in Trillian. Trillian fails to properly validate HTTP 1.1 response headers resulting in a buffer overflow. With a specially crafted request, an attacker can cause the execution of malicious code resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Rumored |
Solution |
Upgrade to version 3.1 or higher, as it has been reported to fix this vulnerability except the issues with Yahoo IM. It is also possible to correct the flaw by implementing the following workaround(s): avoid using the Yahoo IM component until patched |
Products |
|
References |
|
Credit |
|
logiclibrary.com -