[NEWS] Leafnode DoS

SecuriTeam <[email protected]>
Newsgroups gmane.comp.security.securiteam
Message-ID <[email protected]>
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html 

- - - - - - - - -



  Leafnode DoS
------------------------------------------------------------------------


SUMMARY

 <http://leafnode.sourceforge.net/> Leafnode is "a software package that 
implements a store & forward NNTP proxy (client and server) that supports 
TCP connections across IPv4 and IPv6. It can be used to give a regular 
newsreader off-line functionality, merge news articles from several 
upstream newsservers for newsreaders into one server that only support one 
server well and avoid duplicate news download for a small LAN .

A denial of service vulnerability can cause the fetchnews program to crash 
when the upstream server closes the connection while leafnode is receiving 
(1) an article header, or (2) an article body.

DETAILS

Vulnerable Systems:
 * leafnode version 1.11.1 and prior

Immune Systems:
 * leafnode version 1.11.2

A malicious upstream server that purposefully drops the connection after 
fetchnews has requested an article header or body can prevent fetchnews 
from ever querying other servers that are listed after the malicious 
server in the configuration file.

Workaround:
Comment out all configuration pertaining to the malicious server. Or 
update to the latest version.


ADDITIONAL INFORMATION

The information has been provided by  <mailto:[email protected]> 
Matthias Andree .
The original article can be found at:  
<http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt> 
http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt



======================================== 


This bulletin is sent to members of the SecuriTeam mailing list. 
To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] 
In order to subscribe to the mailing list, simply forward this email to: [email protected] 


==================== 
==================== 

DISCLAIMER: 
The information in this bulletin is provided "AS IS" without warranty of any kind. 
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.