Detections
Analytics

LIVE555 Media Server < 2007.11.18 DoS

high Nessus Network Monitor Plugin ID 4289

Synopsis

The remote host is vulnerable to a Denial of Service (DoS) attack.

Description

The remote host is running LIVE555 Media Server, a media streaming server. The version of LIVE55 installed on the remote host is vulnerable to a denial of service attack when sent a request of less than 8 bytes. An attacker exploiting this flaw would only need the ability to connect to the RTSP server via the network. Successful exploitation would result in the service crashing.

Solution

Upgrade to version 2007.11.18 or higher.

See Also

http://www.securityfocus.com/archive/1/[email protected]

Plugin Details

Severity: High

ID: 4289

Family: Generic

Published: 11/19/2007

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:live555:media_server

Reference Information

CVE: CVE-2007-4561, CVE-2007-6036

BID: 25440, 26488