Secunia

Dr_insane has reported a vulnerability in eZ and eZphotoshare, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the connection handling and can be exploited to crash the application by establishing about 80 connections in rapid succession to port 10101/tcp, which is used for receiving conference data from other clients on the same network.

The vulnerability has been confirmed in eZ 3.4.0 and eZphotoshare 1.2.1. Other versions may also be affected.

Solution
Restrict access to port 10101/tcp.

Provided and/or discovered by
Dr_insane

Deep Links
Links available in Customer Area