Re: Mico crashes when contected with wrong IOR / DoS

To: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Mico crashes when contected with wrong IOR / DoS
From: tuergeist <tuergeist@xxxxxxxxxxxxxx>
Date: Sun, 9 Jul 2006 10:40:59 +0200
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=googlemail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=qNUPsRT2l8N0eC1oOqy6ctTqExeeNQgS0I+pwclgC7pjAf05O7W0OEThnoJXgBxGS8jwnpK23KGetC89K0FkcPbRjVsi/asbEoEdp+zY74WseYZi6Xh6rwQZv9O1eNzzC7883V57Rp5j+7owG1Ib61WgGvv8WIst4x+nvsEVsXE=
In-reply-to: <be10f1c50607061151g432d3bfepa51d3e77606e2ebe@xxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <be10f1c50607061151g432d3bfepa51d3e77606e2ebe@xxxxxxxxxxxxxx>

UPDATE

Vendors response, today:

Bugfix is avaible @ http://mico.org/down.html

"A potential denial of service problem has been found in MICO.
Malformed _non_existent call might crash MICO-based application server
side."

Prev by Date: Graffiti Forums v1.0 SQL Injection Vulnerabilities
Next by Date: [ GLSA 200607-04 ] PostgreSQL: SQL injection
Previous by thread: Mico crashes when contected with wrong IOR / DoS
Next by thread: Re: Mico crashes when contected with wrong IOR / DoS
Index(es):
- Date
- Thread