PT-2004-1262 · Realnetworks · Helix Universal Server/Proxy+1

Published 2004-02-17 · Updated 2008-09-05 · CVE-2004-0049

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Helix Universal Server/Proxy version 9 Helix Mobile Server version 10

Description The issue allows remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.

Recommendations For Helix Universal Server/Proxy version 9, restrict access to the Administration System port to minimize the risk of exploitation. For Helix Mobile Server version 10, avoid using the Administration System port until the issue is resolved.

Fix

Related Identifiers

CVE-2004-0049

Affected Products

Helix Mobile Server

Helix Universal Server/Proxy

References · 6

• http://service.real.com/help/faq/security/040112_dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0049 · Security Note
• http://securityfocus.com/bid/9421 · Vendor Advisory
• http://securityfocus.com/archive/1/357834 · Note
• http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html · Note
• http://service.real.com/help/faq/security/security022604.html · Note