jetCast Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in jetCast Server version 2.0. This vulnerability allows local attackers to crash the application by entering an excessively long string, specifically a buffer of 5000 characters, into the Log directory configuration field. Once the buffer is pasted and the 'Start' button is clicked, the server process is terminated, causing a crash.

Impact

Exploiting this vulnerability leads to a crash of the jetCast Server application, terminating the server process and causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first run the jetCast Server application. Navigate to the configuration settings and locate the Log directory input field. Paste a buffer of 5000 characters into this field, then click 'Ok' followed by 'Start'. The application will crash, demonstrating the denial-of-service vulnerability.