Denial of Service Vulnerability in Symantec Ghost Configuration Server

CVE-2001-0598

Summary

Symantec Ghost versions 6.5 and earlier are susceptible to a denial of service attack. An attacker can exploit this vulnerability by sending excessively large data packets (greater than 45KB) to the Ghost Configuration Server operating on port 1347. The server fails to adequately handle such large inputs, resulting in a denial of service condition, effectively disrupting the service for legitimate users.

References