SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emr5000 | Skystream | 1.16 (including) | 1.16 (including) |
| Emr5000 | Skystream | 1.17 (including) | 1.17 (including) |
| Emr5000 | Skystream | 1.18 (including) | 1.18 (including) |
Potential Mitigations
References
- http://www.globalintersec.com/adv/skystream-2002021001.txt
- http://www.iss.net/security_center/static/10380.php
- http://www.securityfocus.com/archive/1/295516
- http://www.securityfocus.com/bid/5977
- http://www.globalintersec.com/adv/skystream-2002021001.txt
- http://www.iss.net/security_center/static/10380.php
- http://www.securityfocus.com/archive/1/295516
- http://www.securityfocus.com/bid/5977