SecurityTracker.com
Keep Track of the Latest Vulnerabilities
with SecurityTracker!
    Home    |    View Topics    |    Search    |    Contact Us    |    Help    |   

SecurityTracker
Archives


Welcome to SecurityTracker!
 
Click to Sign Up
Sign Up
Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
Instant Alerts
Buy our Premium Vulnerability Notification Service to receive customized, instant alerts
Affiliates
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
Partners
Become a Partner and License Our Database or Notification Service
Report a Bug
Report a vulnerability that you have found to SecurityTracker
bugs
@
securitytracker.com
Sign Up!





Category:  Application (Generic)  >  Opal Vendors:  Gnome Development Team
Opal Library Input Validation Flaw in Processing SIP Header Content-Length Values Lets Remote Users Deny Service
SecurityTracker Alert ID:  1018776
SecurityTracker URL:  http://securitytracker.com/id?1018776
CVE Reference:  CVE-2007-4924   (Links to External Site)
Date:  Oct 8 2007
Impact:  Denial of service via network
Fix Available:  Yes   Vendor Confirmed:  Yes  
Version(s): prior to 2.2.10
Description:  A vulnerability was reported in Opal. A remote user can cause denial of service conditions.

A remote user can send a specially crafted SIP protocol header field 'Content-Length' value to cause the target service that uses the opal library to crash.

Jose Miguel Esparza discovered this vulnerability.
Impact:  A remote user can cause an application using the opal library to crash.
Solution:  The vendor has issued a fixed version (2.2.10), available at:

http://ftp.gnome.org/pub/GNOME/sources/opal/2.2/
Cause:  Input validation error
Underlying OS:  Linux (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Oct 8 2007 (Red Hat Issues Fix) Opal Library Input Validation Flaw in Processing SIP Header Content-Length Values Lets Remote Users Deny Service   (bugzilla@redhat.com)
Red Hat has released a fix for Red Hat Enterprise Linux 5.


 Source Message Contents
Date:  Mon, 8 Oct 2007 12:41:13 -0400
Subject:  Opal

 
 
http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html
 
CVE-2007-4924


Go to the Top of This SecurityTracker Archive Page



Home   |    View Topics   |    Search   |    Contact Us   |    Help

Copyright 2007, SecurityGlobal.net LLC