Vulnerability Note VU#136424

Remote Execute vulnerable to denial-of-service

Overview

Remote Execute cannot handle more than seven connections simultaneously. If more than seven connections are attempted, Remote Execute will crash, resulting in a denial-of-service condition.

I. Description

Remote Execute is a network administration tool for the Windows platform that allows users to run applications remotely. Remote Execute contains a vulnerability that may allow a remote attacker to cause a denial-of-service condition. The flaw exists because Remote Execute cannot handle more than seven connections simultaneously. If seven or more connections are attempted, Remote Execute will crash.

II. Impact

A remote attacker may be able to crash Remote Execute resulting in a denial-of-service condition.

III. Solution

Upgrade

This issue was addressed in Remote Execute version 2.3.0.1.

Systems Affected

Vendor	Status	Date Notified	Date Updated
IBEX Software	Unknown	10-Dec-2004

References

http://secunia.com/advisories/13389/
http://www.ibexsoftware.com/downloadRemoteExecute.asp

Credit

This vulnerability was reported by Paul Craig.

This document was written by Jeff Gennari.

Other Information

Date Public:	2004-12-06
Date First Published:	2004-12-10
Date Last Updated:	2004-12-10
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Metric:	1.18
Document Revision:	29

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader