Description
The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.
References
- 5938 vdb-entry
- nylon-recv-endless-dos(10334) vdb-entry
- 20021010 nylon 0.2 (0.3?) DoS mailing-list
- 7281 third-party-advisory