LIVE555 Media Server < 2007.11.18 DoS

High Nessus Network Monitor Plugin ID 4289


The remote host is vulnerable to a Denial of Service (DoS) attack.


The remote host is running LIVE555 Media Server, a media streaming server. The version of LIVE55 installed on the remote host is vulnerable to a denial of service attack when sent a request of less than 8 bytes. An attacker exploiting this flaw would only need the ability to connect to the RTSP server via the network. Successful exploitation would result in the service crashing.


Upgrade to version 2007.11.18 or higher.

See Also[email protected]

Plugin Details

Severity: High

ID: 4289

Family: Generic

Published: 2007/11/19

Modified: 2018/07/11

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C


Base Score: 7.3

Temporal Score: 6.8


Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:live555:media_server

Reference Information

CVE: CVE-2007-6036, CVE-2007-4561

BID: 26488, 25440