Remote DoS Napad na Real Networks Real Server

Ranjivi Serveri:

Real Networks Real Server 7 Linuxc6
Real Networks Real Server 7 Solaris 2.6
Real Networks Real Server 7 Solaris 2.7
Real Networks Real Server 7 Solaris 2.8
Real Networks Real Server 7 Windows NT/2000
Real Networks Real Server 7 SGI Irix 6.2
Real Networks Real Server 7 SGI Irix 6.5
Real Networks Real Server 7 SCO Unixware 7.xx
Real Networks Real Server 7 FreeBSD 3.0
Real Networks Real Server 7.01 Linuxc6
Real Networks Real Server 7.01 Solaris 2.6
Real Networks Real Server 7.01 Solaris 2.7
Real Networks Real Server 7.01 Solaris 2.8
Real Networks Real Server 7.01 Windows NT/2000
Real Networks Real Server 7.01 SGI Irix 6.2
Real Networks Real Server 7.01 SGI Irix 6.5
Real Networks Real Server 7.01 SCO Unixware 7.xx
Real Networks Real Server 7.01 FreeBSD 3.0
Real Networks Real Server G2 1.0

PROBLEM : Otkriven je memorijski problem sa RealServer 7 Server (patchiranom ili ne-patchiranom verzijom). Kada pošaljemo specijalnu malicioznu informaciju na RealServer HTTP Port (default je 8080) proces servera se zaustavlja i server prestaje da odgovara. RealServer pada i nije funkcionalan da odgovara na zahtjeve za media brodcasts materijalom. Za sada jedina solucija je resetovati server da bi se vratio na normalno stanje.

Više informacija na stranicama:

Real Networks
Program URL
Download URL
Underground Security Systems Research