[ GLSA 200809-11 ] HAVP: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: HAVP: Denial of Service (GLSA 200809-11)
Severity: normal
Exploitable: remote
Date: September 21, 2008
Bug(s): #234715
ID: 200809-11

Synopsis


A Denial of Service vulnerability has been reported in HAVP.


Background


HAVP is a HTTP AntiVirus Proxy.


Affected Packages

Package: net-proxy/havp
Vulnerable: < 0.89
Unaffected: >= 0.89
Architectures: All supported architectures


Description


Peter Warasin reported an infinite loop in sockethandler.cpp when
connecting to a non-responsive HTTP server.


Impact


A remote attacker could send requests to unavailable servers, resulting
in a Denial of Service.


Workaround


There is no known workaround at this time.


Resolution


All HAVP users should upgrade to the latest version: