RSniff Remote Denial of Service Vulnerability
BID:10093
Info
RSniff Remote Denial of Service Vulnerability
| Bugtraq ID: | 10093 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2004 12:00AM |
| Updated: | Apr 09 2004 12:00AM |
| Credit: | Discovery is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
RSniff RSniff 1.0 |
| Not Vulnerable: | |
Discussion
RSniff Remote Denial of Service Vulnerability
It has been reported that RSniff may be prone to a remote denial of service issue when a client repeatedly connects to the RSniff daemon and does not issue the 'AUTHENTICATE' command to log in or simply closes the connection. The server fails to accept new connections after about 1024 malicious connection attempts have been made.
RSniff 1.0 has been reported to be prone to this issue.
It has been reported that RSniff may be prone to a remote denial of service issue when a client repeatedly connects to the RSniff daemon and does not issue the 'AUTHENTICATE' command to log in or simply closes the connection. The server fails to accept new connections after about 1024 malicious connection attempts have been made.
RSniff 1.0 has been reported to be prone to this issue.
Exploit / POC
RSniff Remote Denial of Service Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
RSniff Remote Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
RSniff Remote Denial of Service Vulnerability
References:
References:
- RSniff product page (RSniff)
- DoS in Rsniff 1.0 (Luigi Auriemma