DG Remote Control Server Remote Denial of Service Vulnerability

Bugtraq ID:	14263
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 14 2005 12:00AM
Updated:	Jul 14 2005 12:00AM
Credit:	Discovery is credited to basher13.
Vulnerable:	DG Remote Control Server 1.6.2
Not Vulnerable:

DG Remote Control Server Remote Denial of Service Vulnerability

DG Remote Control Server is affected by a remote denial of service vulnerability.

An attacker can cause a denial of service condition by sending large amounts of data to the listening ports of the application.

This issue may lead to a buffer overflow condition facilitating remote access, however, this has not been confirmed.

DG Remote Control Server 1.6.2 is affected by this vulnerability.

DG Remote Control Server Remote Denial of Service Vulnerability

The following proof of concept examples is available:

• /data/vulnerabilities/exploits/remote_contorl_dos.pl

DG Remote Control Server Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

DG Remote Control Server Remote Denial of Service Vulnerability

References:

• Remote Control Server (DG)
  
• Remote Control Server DOS Exploit (basher13)