TCP-IP Datalook Local Denial of Service Vulnerability

Bugtraq ID:	14061
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jun 26 2005 12:00AM
Updated:	Jun 26 2005 12:00AM
Credit:	Discovery is credited to basher13.
Vulnerable:	TCP-IP Datalook TCP-IP Datalook 1.3
Not Vulnerable:

TCP-IP Datalook Local Denial of Service Vulnerability

TCP-IP Datalook is affected by a local denial of service vulnerability.

Specifically, an attacker can send a specially crafted packet to the listening port of TCP-IP Datalook and cause a crash.

TCP-IP Datalook 1.3 is reported to be affected by this issue. Other versions may be vulnerable as well.

TCP-IP Datalook Local Denial of Service Vulnerability

The following exploit was provided by INFGP - Hacking&security Research:

• /data/vulnerabilities/exploits/ipdatalook_dos.c

TCP-IP Datalook Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

TCP-IP Datalook Local Denial of Service Vulnerability

References:

• TCP-IP Datalook Lets Local Users Deny Service (SecurityTracker)