Software602 602 LAN Suite - Multiple Remote Denial of Service Vulnerabilities

2004-11-06T00:00:00
ID EXPLOITPACK:12A2BE0C782328ECB8B5AE0257FB14B4
Type exploitpack
Reporter Luigi Auriemma
Modified 2004-11-06T00:00:00

Description

Software602 602 LAN Suite - Multiple Remote Denial of Service Vulnerabilities

                                        
                                            source: https://www.securityfocus.com/bid/11615/info

602 LAN SUITE is reported prone to multiple remote denial of service vulnerabilities. The following specific issues are reported:

It is reported that an attacker may consume CPU and memory resources on a target 602 LAN SUITE server. Reports indicate that this condition exists due to a lack of sanity checking prior to the allocation of regions of memory by the affected software. 

A remote attacker may exploit this vulnerability to consume system resources, ultimately impacting the performance of the target computer and potentially resulting in a denial of service.

A second vulnerability is reported in the manner in which 602 LAN SUITE handles telnet proxy requests. It is reported that the proxy does not perform sufficient sanity checks on the destination IP of a proxy request.

A remote attacker may exploit this condition to exhaust all available sockets on a target computer that is running 602 LAN SUITE telnet proxy. This will effectively deny service to legitimate requests.

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/24726.zip