Eeye IRIS缓冲区溢出漏洞

漏洞信息详情

Eeye IRIS缓冲区溢出漏洞

• CNNVD编号：CNNVD-200010-112
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0734
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2000-10-20
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  spynet
• 漏洞来源：
  This vulnerability…

eEye IRIS 1.01 beta版本存在漏洞。远程攻击者可以借助大量UDP连接来导致服务拒绝。

The vendor has provided both a statement on this issue (attached in the ‘Credit’ section) and a work around:
” The problem triggered by this “DoS” seems to result from filling packet buffers faster than Windows can paint them to the screen. If you are really worried about this, until Iris is out of beta and fixes the “problem”, then we recommend you turn off Iris’s Capture packet display feature and use Iris’s decode view instead.”

来源: BID
名称: 1627
链接:http://www.securityfocus.com/bid/1627

来源: BUGTRAQ
名称: 20000831 Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=96774637326591&w=2