Ortro Security Update Fixes Multiple Unspecified Vulnerabilities


Description   Multiple vulnerabilities have been identified in Ortro. These issues are caused by unspecified errors with unknown impacts and unknown attack vectors. No further details have been disclosed.
     
Vulnerable Products   Vulnerable Software:
Ortro versions prior to 1.3.4
     
Solution   Upgrade to Ortro version 1.3.4 : http://www.ortro.net/download
     
CVE  
     
References   http://dev.ortro.net/news/show/8
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Possible buffer overflow in HTTP request/reply
3.2.0
     


 
 
 
 
 Risk level 
Moderate 

 Vulnerability First Public Report Date 
2009-10-27 

 Target Type 
Server 

 Possible exploit 
Local & Remote