Secunia

Some vulnerabilities have been reported in bbs100, which potentially can be exploited by malicious users or malicious people to cause a DoS (Denial of Service).

1) An unspecified error exists within the "shift_StringIO()" function in src/StringIO.c, which can be exploited to crash the service.

2) A boundary error exists within the "state_login_prompt()" function in src/state_login.c, which potentially can be exploited to crash the service by logging in as "guest" after a guest user was already logged in.

Note: Additionally, some problems with the implementation of "v*printf()" like functions, which could lead to a crash on certain architectures (e.g. Debian GNU/Linux for PPC), have been corrected.

The vulnerabilities are reported in versions prior to 3.2.

Solution
Update to version 3.2.
Further details available in Customer Area

Provided and/or discovered by
1) Georbit
2) Reported by the vendor

Changelog
Further details available in Customer Area

Original Advisory
http://www.ka.sara.nl/home/walter//bbs100/ChangeLog.txt

Deep Links
Links available in Customer Area