PT-2003-1706 · Neomodus · Neomodus Direct Connect

Lord Yup · Published 2003-07-15 · Updated 2016-10-18 · CVE-2003-0554

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NeoModus Direct Connect version 1.0 build 9

Description: The issue allows remote attackers to cause a denial of service, potentially leading to connection and memory exhaustion, by flooding the system with ConnectToMe requests that contain arbitrary IP addresses and ports.

Recommendations: For version 1.0 build 9, consider implementing rate limiting on ConnectToMe requests to prevent excessive connection attempts, and restrict the acceptance of arbitrary IP addresses and ports to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-0554

Affected Products

Neomodus Direct Connect

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0554 · Security Note
• http://marc.info/?l=bugtraq&m=105820316708258&w=2 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006505.html · Note