BinTec X Series Router PPTP Denial of Service Vulnerability
BID:2549
Info
BinTec X Series Router PPTP Denial of Service Vulnerability
| Bugtraq ID: | 2549 |
| Class: | Environment Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2001 12:00AM |
| Updated: | Apr 06 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by Jan Münther <[email protected]> on April 6, 2001. |
| Vulnerable: |
BinTec X4000 5.1.6 patch 10 BinTec X1200 5.1 BinTec X1000 5.3 Rev 1 |
| Not Vulnerable: |
BinTec X4000 6.1 Rev 2 BinTec X1200 6.1 Rev 2 BinTec X1000 6.1 Rev 2 |
Discussion
BinTec X Series Router PPTP Denial of Service Vulnerability
The X series router is a hardware and firmware router solution manufactured by BinTec. It is designed as a cost-effective network router solution for small to medium-sized companies.
A problem in the X series firmware could allow a Denial of Service attack. Versions of the router that have not been registered and had the license key entered into the firmware are vulnerable to denial of service by simple TCP connections. When the router receives a connection on port 1723/TCP (PPTP Service) or port 53/UDP, and has not had the registration key entered into the router firmware, the router freezes, and must be power-cycled to resume operation.
It is therefore possible for a remote user to deny all service to a network using this router.
The X series router is a hardware and firmware router solution manufactured by BinTec. It is designed as a cost-effective network router solution for small to medium-sized companies.
A problem in the X series firmware could allow a Denial of Service attack. Versions of the router that have not been registered and had the license key entered into the firmware are vulnerable to denial of service by simple TCP connections. When the router receives a connection on port 1723/TCP (PPTP Service) or port 53/UDP, and has not had the registration key entered into the router firmware, the router freezes, and must be power-cycled to resume operation.
It is therefore possible for a remote user to deny all service to a network using this router.
Exploit / POC
BinTec X Series Router PPTP Denial of Service Vulnerability
telnet affected.xseries.router 1723
telnet affected.xseries.router 1723
Solution / Fix
BinTec X Series Router PPTP Denial of Service Vulnerability
Solution:
A temporary work around is to create an access control entry denying connections to port 1723/TCP.
Problem has been confirmed by the vendor. This issue has been addressed in the latest software version, 6.1 Rev 2. Users are advised to upgrade.
Solution:
A temporary work around is to create an access control entry denying connections to port 1723/TCP.
Problem has been confirmed by the vendor. This issue has been addressed in the latest software version, 6.1 Rev 2. Users are advised to upgrade.
References
BinTec X Series Router PPTP Denial of Service Vulnerability
References:
References: