Описание
The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message.
The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-1337
- http://aluigi.altervista.org/adv/timbuto-adv.txt
- http://aluigi.org/poc/timbuto.zip
- http://secunia.com/advisories/29316
- http://securityreason.com/securityalert/3741
- http://www.securityfocus.com/archive/1/489360/100/0/threaded
- http://www.vupen.com/english/advisories/2008/0840
Связанные уязвимости
The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message.