PT-2004-1539 · Realnetworks · Helix Universal Server

CVE-2004-0389 · Publicado 2004-04-17 · Atualizado 2024-02-15

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Universal Server versions 9.0.1 through 9.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via malformed requests that trigger a null dereference. This can be demonstrated using either GET PARAMETER or DESCRIBE requests.

Recommendations For versions 9.0.1 and 9.0.2, consider restricting access to the server to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using malformed requests that could trigger a null dereference.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2004-0389

Produtos afetados

Helix Universal Server

Referências · 7

• 🔥 http://idefense.com/application/poi/display?id=102&type=vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/24010 · Exploit
• 🔥 http://securityfocus.com/bid/10157 · Exploit
• http://secunia.com/advisories/11395 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0389 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15880 · Nota
• https://t.me/cvenotify/71676 · Publicação no Telegram