PT-2004-1539 · Realnetworks · Helix Universal Server

Published 2004-04-17 · Updated 2024-02-15 · CVE-2004-0389

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Universal Server versions 9.0.1 through 9.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via malformed requests that trigger a null dereference. This can be demonstrated using either GET PARAMETER or DESCRIBE requests.

Recommendations For versions 9.0.1 and 9.0.2, consider restricting access to the server to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using malformed requests that could trigger a null dereference.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2004-0389

Affected Products

Helix Universal Server

References · 7

• 🔥 http://idefense.com/application/poi/display?id=102&type=vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/24010 · Exploit
• 🔥 http://securityfocus.com/bid/10157 · Exploit
• http://secunia.com/advisories/11395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0389 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15880 · Note
• https://t.me/cvenotify/71676 · Telegram Post