Re: Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability

[Elias Levy <aleph1 () SECURITYFOCUS COM>]

If anyone can reproduce the crash of Iris please let us know. Being able
to force a sniffer application from using most of its CPU by flooding
the network is an endemic problem of that type of application, although
in this case the problem seems like it can easily be mitigate by configuring
the app not to display packets graphically which is what is consuming most
of the CPU.

The real possible vulnerability is the heap overflow that may make Iris to
crash. If anyone can verify this claim we'd like to hear from them.
--
Elias Levy
SecurityFocus.com
http://www.securityfocus.com/
Si vis pacem, para bellum