silce-server router DoS
Published:		07.03.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7359
Type:		remote
Level:		5/10
Description:		Invalid authentication hash algorithm with empty cipher causes NULL pointer crash.

Affected:		SILC : silc-server 1.0
CVE:		CVE-2007-1327 (The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a request without a cipher algorithm and an invalid HMAC algorithm.)

Original document

Alexander Heidenreich, [Full-disclosure] silc-server 1.0.2 denial-of-service vulnerability (07.03.2007)

Discuss:

Read or add your comments to this news (0 comments)