JVN#82749282 CapsSuite Small Edition PatchMeister vulnerable to denial of service

CapsSuite Small Edition PatchMeister is a product that manages the application of security patches. CapsSuite Small Edition PatchMeister contains a denial of service (DoS) vulnerability.

Impact

On a server or workstation with “Client Service for PTM” installed, a remote attacker may shut down or restart the operating system.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Filter traffic using a firewall
Deny access to port 56015 for packets that do not have a source IP of the CapsSuite Small Edition PatchMeister server.

For more information, refer to the developer’s website.

Products Affected

Servers or workstations that installed “Client Service for PTM” from the following products are vulnerable.

• CapsSuite Small Edition PatchMeister Ver2.0 Update2 and earlier