sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.
Weakness
The product uses or accesses a resource that has not been initialized.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http_antivirus_proxy | Havp | 0.88 (including) | 0.88 (including) |
| Havp | Ubuntu | dapper | * |
| Havp | Ubuntu | feisty | * |
| Havp | Ubuntu | gutsy | * |
| Havp | Ubuntu | hardy | * |
| Havp | Ubuntu | upstream | * |
Potential Mitigations
References
- http://secunia.com/advisories/31494
- http://secunia.com/advisories/31971
- http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml
- http://www.securityfocus.com/bid/30697
- http://www.securitytracker.com/id?1020900
- http://www.server-side.de/index.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44467
- https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com
- http://secunia.com/advisories/31494
- http://secunia.com/advisories/31971
- http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml
- http://www.securityfocus.com/bid/30697
- http://www.securitytracker.com/id?1020900
- http://www.server-side.de/index.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44467
- https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com