Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
BID:11615
Info
Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
| Bugtraq ID: | 11615 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2004 12:00AM |
| Updated: | Nov 06 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
Software602 602Pro LAN SUITE 2004 2004.0.04.0909 Software602 602Pro LAN SUITE 2003 Software602 602Pro LAN SUITE 2002 2002.0.2 .0916 Software602 602Pro LAN SUITE 2002 Software602 602Pro LAN SUITE 2000a 2000.0.1 .35 Software602 602Pro LAN SUITE 2000a 2000.0.1 .34 Software602 602Pro LAN SUITE 2000a 2000.0.1 .33 Software602 602Pro LAN SUITE 2000a 2000.0.1 .32 Software602 602 Pro LAN SUITE 2004 |
| Not Vulnerable: |
Software602 602Pro LAN SUITE 2004 2004.0.04.1104 |
Discussion
Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
602 LAN SUITE is reported prone to multiple remote denial of service vulnerabilities. The following specific issues are reported:
It is reported that an attacker may consume CPU and memory resources on a target 602 LAN SUITE server. Reports indicate that this condition exists due to a lack of sanity checking prior to the allocation of regions of memory by the affected software.
A remote attacker may exploit this vulnerability to consume system resources, ultimately impacting the performance of the target computer and potentially resulting in a denial of service.
A second vulnerability is reported in the manner in which 602 LAN SUITE handles telnet proxy requests. It is reported that the proxy does not perform sufficient sanity checks on the destination IP of a proxy request.
A remote attacker may exploit this condition to exhaust all available sockets on a target computer that is running 602 LAN SUITE telnet proxy. This will effectively deny service to legitimate requests.
602 LAN SUITE is reported prone to multiple remote denial of service vulnerabilities. The following specific issues are reported:
It is reported that an attacker may consume CPU and memory resources on a target 602 LAN SUITE server. Reports indicate that this condition exists due to a lack of sanity checking prior to the allocation of regions of memory by the affected software.
A remote attacker may exploit this vulnerability to consume system resources, ultimately impacting the performance of the target computer and potentially resulting in a denial of service.
A second vulnerability is reported in the manner in which 602 LAN SUITE handles telnet proxy requests. It is reported that the proxy does not perform sufficient sanity checks on the destination IP of a proxy request.
A remote attacker may exploit this condition to exhaust all available sockets on a target computer that is running 602 LAN SUITE telnet proxy. This will effectively deny service to legitimate requests.
Exploit / POC
Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
The following exploit is available:
The following exploit is available:
Solution / Fix
Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
Solution:
It is reported that this vulnerability is fixed in version 2004.0.04.1104 of 602LAN SUITE. This is not confirmed; customers are advised to contact the vendor for further details regarding obtaining and applying appropriate updates.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that this vulnerability is fixed in version 2004.0.04.1104 of 602LAN SUITE. This is not confirmed; customers are advised to contact the vendor for further details regarding obtaining and applying appropriate updates.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Software602 602 LAN Suite Multiple Remote Denial Of Service Vulnerabilities
References:
References:
- 602Pro Lan Suite Product Information Page (Software602)
- 602Pro LAN SUITE Product Page (Software602)
- Resources consumption in 602 Lan Suite 2004.0.04.0909 (Luigi Auriemma