PT-2003-1706 · Neomodus · Neomodus Direct Connect

Lord Yup · Publicado 2003-07-15 · Atualizado 2016-10-18 · CVE-2003-0554

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NeoModus Direct Connect version 1.0 build 9

Description: The issue allows remote attackers to cause a denial of service, potentially leading to connection and memory exhaustion, by flooding the system with ConnectToMe requests that contain arbitrary IP addresses and ports.

Recommendations: For version 1.0 build 9, consider implementing rate limiting on ConnectToMe requests to prevent excessive connection attempts, and restrict the acceptance of arbitrary IP addresses and ports to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-0554

Produtos afetados

Neomodus Direct Connect

Referências · 3

• http://marc.info/?l=bugtraq&m=105820316708258&w=2 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006505.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0554 · Nota de Segurança