Emdros

Tracker: Bugs

9 Malformed MQL can lead to DOS attack - ID: 1116935

Last Update: Settings changed ( ulrikp )

Details:

The MQL parser will leak memory if given certain kinds
of malformed MQL statements. This can lead to a DOS
attack with more and more memory being consumed. The
vulnerability is normally only exploitable if a user
has local access. However, if MQL is run as a service
through xinetd or similar, it is also exploitable remotely.

Submitted:

Ulrik Sandborg-Petersen ( ulrikp ) - 2005-02-05 18:07

Priority:

Status:

Closed

Resolution:

Fixed

Assigned:

Ulrik Sandborg-Petersen

Category:

MQL-layer

Group:

v1.1.21

Visibility:

Public

Comments ( 2 )

Date: 2005-02-05 22:58 Sender: ulrikp Logged In: YES user_id=191143 All platforms are affected: Windows, Linux, Solaris. However, I have confirmed that the fixed version leaks no memory on any of these systems.
Date: 2005-02-05 18:08 Sender: ulrikp Logged In: YES user_id=191143 Fixed in local CVS. Will release in 1.1.22, hopefully within the next week.

Attached File

Changes ( 4 )

Field	Old Value	Date	By
resolution_id	Accepted	2005-02-08 20:04	ulrikp
close_date	-	2005-02-08 20:04	ulrikp
status_id	Open	2005-02-08 20:04	ulrikp
resolution_id	None	2005-02-05 18:08	ulrikp

Emdros

Tracker: Bugs

Comments ( 2 )

Attached File

No Files Currently Attached

Changes ( 4 )

About SourceForge

Find Software

Develop Software

Community

Help