----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/quality_assurance_analyst/
http://secunia.com/web_application_security_specialist/ 
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
AnywhereUSB/5 Software Drivers Denial of Service Vulnerability

SECUNIA ADVISORY ID:
SA21739

VERIFY ADVISORY:
http://secunia.com/advisories/21739/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
>From local network

SOFTWARE:
AnywhereUSB/5 Software Drivers
http://secunia.com/product/11825/

DESCRIPTION:
Safend has reported a vulnerability in AnywhereUSB/5 Software
Drivers, which can be exploited by malicious people to cause a DoS
(Denial of Service).

The vulnerability is caused due to an error in the processing of USB
string descriptors. This can be exploited to crash a vulnerable
system by impersonating a server and sending a string descriptor with
a 1 byte size specified in the header.

The vulnerability has been reported in version 1.80.00. Other
versions may also be affected.

SOLUTION:
Only install the affected drivers on systems located on a trusted
network.

PROVIDED AND/OR DISCOVERED BY:
Itzik Kotler, Safend

ORIGINAL ADVISORY:
http://www.safend.com/424-en/Safend.aspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------