OSVDB ID: 24700 Title: Empire Server Format String DoS |
Info |
|
|
Dates |
||||
|
|
Description |
A remote format string vulnerability exists in Empire Server. The user-supplied data in the load, spy, and bomb functions fail to correctly validate user-supplied input. With a specially crafted transaction including format strings, an attacker can cause the process to crash, resulting in a loss of availability to the service. |
Classification |
Location:
Remote / Network Access,
Local / Remote,
Context Dependent
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Upgrade to version 4.3.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |