search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Remote Execute vulnerable to denial-of-service

Vulnerability Note VU#136424

Original Release Date: 2004-12-10 | Last Revised: 2004-12-10

Overview

Remote Execute cannot handle more than seven connections simultaneously. If more than seven connections are attempted, Remote Execute will crash, resulting in a denial-of-service condition.

Description

Remote Execute is a network administration tool for the Windows platform that allows users to run applications remotely. Remote Execute contains a vulnerability that may allow a remote attacker to cause a denial-of-service condition. The flaw exists because Remote Execute cannot handle more than seven connections simultaneously. If seven or more connections are attempted, Remote Execute will crash.

Impact

A remote attacker may be able to crash Remote Execute resulting in a denial-of-service condition.

Solution

Upgrade

This issue was addressed in Remote Execute version 2.3.0.1.

Vendor Information

136424
 

IBEX Software Unknown

Updated:  December 10, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base
Temporal
Environmental

References

Acknowledgements

This vulnerability was reported by Paul Craig.

This document was written by Jeff Gennari.

Other Information

CVE IDs: None
Severity Metric: 1.18
Date Public: 2004-12-06
Date First Published: 2004-12-10
Date Last Updated: 2004-12-10 20:19 UTC
Document Revision: 30

Sponsored by CISA.