http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt

20070824 [MU-200708-01] Helix DNA Server Heap Corruption

26609

3069

25440

1018605

ADV-2007-2986

The remote host is running LIVE555 Media Server, a media streaming server.  The version of LIVE55 installed on the remote host is vulnerable to a denial of service attack when sent a request of less than 8 bytes.  An attacker exploiting this flaw would only need the ability to connect to the RTSP server via the network.  Successful exploitation would result in the service crashing.

The remote host is running Helix Server or Helix DNA Server, a media streaming server. 

The version of the Helix server installed on the remote host reportedly contains a heap overflow that is triggered using an RTSP command with multiple 'Require' headers.  An unauthenticated, remote attacker can leverage this flaw to execute arbitrary code subject to the privileges under which it operates, by default LOCAL SYSTEM on Windows.

 The remote host is running Helix Server or Helix DNA Server, a media streaming server.  The version of the Helix server installed on the remote host reportedly contains a heap overflow that is triggered using an RTSP command with multiple 'Require' headers.  An unauthenticated remote attacker can leverage this flaw to execute arbitrary code subject to the privileges under which it operates, by default LOCAL SYSTEM on Windows.

ID	Name	Product	Family	Severity
4289	LIVE555 Media Server < 2007.11.18 DoS	Nessus Network Monitor	Generic	high
25950	RealNetworks Helix DNA Server RTSP Service Crafted Require Header Remote Overflow	Nessus	Gain a shell remotely	critical
4192	Helix Server < 11.1.4 RTSP Command Multiple Requires Overflow	Nessus Network Monitor	Generic	high

CVE-2007-4561

high

Tenable Plugins

high

critical

high