LIVE555 Media Server < 2007.11.18 DoS

High Nessus Network Monitor Plugin ID 4289

Synopsis

The remote host is vulnerable to a Denial of Service (DoS) attack.

Description

The remote host is running LIVE555 Media Server, a media streaming server. The version of LIVE55 installed on the remote host is vulnerable to a denial of service attack when sent a request of less than 8 bytes. An attacker exploiting this flaw would only need the ability to connect to the RTSP server via the network. Successful exploitation would result in the service crashing.

Solution

Upgrade to version 2007.11.18 or higher.

See Also

http://www.securityfocus.com/archive/1/[email protected]

Plugin Details

Severity: High

ID: 4289

Family: Generic

Published: 2007/11/19

Modified: 2018/07/11

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 7.3

Temporal Score: 6.8

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:live555:media_server

Reference Information

CVE: CVE-2007-6036, CVE-2007-4561

BID: 26488, 25440