FreeBSD : razor-agents -- denial of service vulnerability (85069fb6-e15b-11d9-83cf-0010dc5df42d)

high Nessus Plugin ID 19012

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

A Secunia security advisory reports :

Two vulnerabilities have been reported in Razor-agents, which can be exploited by malicious people to cause a DoS (Denial of Service).

- An unspecified error in the preprocessing of certain HTML messages can be exploited to crash the application.

- A bug in the discovery logic causes Razor-agents to go into an infinite loop and consume a large amount of memory when discovery fails.

Solution

Update the affected package.

See Also

http://www.nessus.org/u?4b6efb4d

Plugin Details

Severity: High

ID: 19012

File Name: freebsd_pkg_85069fb6e15b11d983cf0010dc5df42d.nasl

Version: 1.14

Type: local

Published: 7/13/2005

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:razor-agents, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 6/20/2005

Vulnerability Publication Date: 6/17/2005

Reference Information

Secunia: 15739