|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200402-03] Monkeyd Denial of Service vulnerability Vulnerability Scan
Vulnerability Scan Summary
Monkeyd Denial of Service vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200402-03
(Monkeyd Denial of Service vulnerability)
A bug in the URI processing of incoming requests allows for a Denial of
Service to be launched against the webserver, which may cause the server
to crash or behave sporadically.
Impact
Although there are no public exploits known for bug, users are recommended
to upgrade to ensure the security of their infrastructure.
Workaround
There is no immediate workaround
a software upgrade is
required. The vulnerable function in the code has been rewritten.
References:
http://cvs.sourceforge.net/viewcvs.py/monkeyd/monkeyd/src/utils.c?r1=1.3&r2=1.4
Solution:
All users are recommended to upgrade monkeyd to 0.8.2:
# emerge sync
# emerge -pv ">=net-www/monkeyd-0.8.2"
# emerge ">=net-www/monkeyd-0.8.2"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
