JVN#23809730: GIGAPOD vulnerable to denial-of-service (DoS)

GIGAPOD file servers (Appliance model and Software model) from TripodWorks CO.,LTD. provide two web interfaces. First, a user web interface via ports 80/443, and a second, an administrative web interface via port 8001. The administrative web interface uses a version of the Apache HTTP server which contains a flaw in handling HTTP requests (CVE-2011-3192). As a result, GIGAPOD contains a denial-of-service (DoS) vulnerability.

Impact

A remote attacker may be able to cause a denial-of-service (DoS).

Solution

Update the software
Apply the appropriate update according to the information provided by the developer.

Products Affected

• GIGAPOD OFFICEHARD Appliance model versions 3.04.03 and earlier
• GIGAPOD 2010 / GIGAPOD 3 Appliance model versions 3.01.02 and earlier
• GIGAPOD 2010 / GIGAPOD 3 Software model versions 3.01.02 and earlier