Secunia

Dr_insane has reported a vulnerability in efFingerD, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the "sockFinger_DataArrival()" function when handling overly long arguments (180 bytes or more). This can be exploited to crash the daemon with a run-time error ("53: File not found").

During analysis another DoS issue was also discovered. The daemon can be crashed with a run-time error ("40006: Wrong protocol or connection state for requested transaction or request") by sending a malformed packet containing only a single byte of data.

The vulnerabilities have been confirmed in version 0.2.12.

Solution
Use another product.

Provided and/or discovered by
Dr_insane

Changelog
Further details available in Customer Area

Original Advisory
http://members.lycos.co.uk/r34ct/main/efFingerD.txt

Deep Links
Links available in Customer Area