Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:REAL:NEG-CONT-LEN |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
APP |
Keywords |
Helix Universal Server Invalid Content Length |
Release Date |
2005/08/04 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Helix Universal Server Invalid Content Length
This signature detects attempts to exploit a known vulnerability against the Real Networks Helix Universal Server. An attacker can send an RTSP request with a invalid content length, which can cause a denial-of-service condition.
Extended Description
A remote integer handling denial of service vulnerability affects the Real Networks Helix Universal Server. The problem surrounds the mishandling of some POST headers values. An attacker can exploit this issue to cause the affected server to consume excessive computer resources and hang, denying service to legitimate users.
Affected Products
- Real_networks helix_universal_gateway 9.0.0
- Real_networks helix_universal_gateway 9.0.2 .881
- Real_networks helix_universal_mobile_gateway 10.1.1 .120
- Real_networks helix_universal_mobile_gateway 10.3.1 .716
- Real_networks helix_universal_mobile_server 10.1.1 .120
- Real_networks helix_universal_mobile_server 10.3.1 .716
References