[NEWS] Leafnode DoS
SecuriTeam <[email protected]>
| Newsgroups | gmane.comp.security.securiteam |
|---|---|
| Message-ID | <[email protected]> |
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source. http://www.securiteam.com/mailinglist.html - - - - - - - - - Leafnode DoS ------------------------------------------------------------------------ SUMMARY <http://leafnode.sourceforge.net/> Leafnode is "a software package that implements a store & forward NNTP proxy (client and server) that supports TCP connections across IPv4 and IPv6. It can be used to give a regular newsreader off-line functionality, merge news articles from several upstream newsservers for newsreaders into one server that only support one server well and avoid duplicate news download for a small LAN . A denial of service vulnerability can cause the fetchnews program to crash when the upstream server closes the connection while leafnode is receiving (1) an article header, or (2) an article body. DETAILS Vulnerable Systems: * leafnode version 1.11.1 and prior Immune Systems: * leafnode version 1.11.2 A malicious upstream server that purposefully drops the connection after fetchnews has requested an article header or body can prevent fetchnews from ever querying other servers that are listed after the malicious server in the configuration file. Workaround: Comment out all configuration pertaining to the malicious server. Or update to the latest version. ADDITIONAL INFORMATION The information has been provided by <mailto:[email protected]> Matthias Andree . The original article can be found at: <http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt> http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt ======================================== This bulletin is sent to members of the SecuriTeam mailing list. To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] In order to subscribe to the mailing list, simply forward this email to: [email protected] ==================== ==================== DISCLAIMER: The information in this bulletin is provided "AS IS" without warranty of any kind. In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.