ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Realsecure_network_sensor | Information_security_systems | 5.0_xpu_3.4 (including) | 5.0_xpu_3.4 (including) |
| Realsecure_network_sensor | Information_security_systems | 5.5.1_xpu_3.4 (including) | 5.5.1_xpu_3.4 (including) |
| Realsecure_network_sensor | Information_security_systems | 5.5.2_xpu_3.4 (including) | 5.5.2_xpu_3.4 (including) |
| Realsecure_network_sensor | Information_security_systems | 5.5_xpu_3.4 (including) | 5.5_xpu_3.4 (including) |
| Realsecure_network_sensor | Information_security_systems | 6.0_xpu_3.4 (including) | 6.0_xpu_3.4 (including) |
| Realsecure_network_sensor | Information_security_systems | 6.5 (including) | 6.5 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html
- http://www.iss.net/security_center/alerts/advise116.php
- http://www.iss.net/security_center/static/8961.php
- http://www.osvdb.org/5165
- http://www.securityfocus.com/bid/4649
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html
- http://www.iss.net/security_center/alerts/advise116.php
- http://www.iss.net/security_center/static/8961.php
- http://www.osvdb.org/5165
- http://www.securityfocus.com/bid/4649