OSVDB ID: 84444

Title: Novell Remote Manager Small Http Interface Daemon (httpstkd) ProcessAuthorizationFailure() Function HTTP Header Parsing Remote DoS

Info

Disclosure

Aug 02, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Novell Remote Manager contains a flaw that may allow a remote denial of service. The issue is triggered when an off-by-one error occurs in the ProcessAuthorizationFailure() function of the Small Http Interface Daemon (httpstkd) during the parsing of HTTP headers. This will result in a loss of availability for the program.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Solution Unknown
Exploit: Exploit Private
Disclosure: Third-party Verified, Uncoordinated Disclosure
OSVDB: Web Related

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Novell, Inc.

Novell Remote Manager

2.0.2 Release 99.10

References

Security Tracker: 1027343
Secunia Advisory ID: 49792
Vendor URL: http://www.novell.com/home/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/84444