Ground Control II Client/Server Large Packet DoS

2004-08-26T00:00:00
ID OSVDB:9272
Type osvdb
Reporter Luigi Auriemma(aluigi@altervista.org)
Modified 2004-08-26T00:00:00

Description

Vulnerability Description

GroundControl contains a flaw that may allow a remote denial of service. The issue is triggered when the client or server receives a packet bigger than 512 bytes, and will result in loss of availability for the GroundControl server.

Solution Description

Currently, there are no known workarounds or upgrades to correct this issue. However, Luigi Auriemma has released an unofficial patch to address this vulnerability.

Short Description

GroundControl contains a flaw that may allow a remote denial of service. The issue is triggered when the client or server receives a packet bigger than 512 bytes, and will result in loss of availability for the GroundControl server.

References:

Vendor URL: http://www.groundcontrol2.com/ Security Tracker: 1011075 Related OSVDB ID: 9316 Other Solution URL: http://aluigi.altervista.org/patches/gc2ds-1007-fix.zip Other Advisory URL: http://aluigi.altervista.org/adv/gc2boom-adv.txt Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2004-08/0375.html ISS X-Force ID: 17130 Generic Exploit URL: http://aluigi.altervista.org/poc/gc2boom.zip CVE-2004-1751 Bugtraq ID: 11058