A vulnerability has been reported in Linear eMerge, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the management component when handling HTTP requests. This can be exploited to reset the configuration of the management component and disconnect it from the network by requesting a specially crafted URL.

NOTE: Node components continue to function normally after the vulnerability is exploited.

The vulnerability is reported in all 2.5.x versions. Other versions may also be affected.

Solution
An upgrade script fixing the vulnerability is reportedly available. Please contact the vendor for more information.

Provided and/or discovered by
US-CERT credits Shawn Merdinger.

Changelog
Further details available to Secunia VIM customers

Original Advisory
US-CERT VU#571629:
http://www.kb.cert.org/vuls/id/571629

Deep Links
Links available to Secunia VIM customers