Denicomp rexecd Denial of Service Vulnerability

Bugtraq ID:	2691
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2001 12:00AM
Updated:	May 03 2001 12:00AM
Credit:	Reported to bugtraq by SNS Research <[email protected]>
Vulnerable:	Denicomp Winsock REXECD/NT 1.5 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.5 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.4 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.4 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.3 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.3 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.2 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.2 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.1 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.1 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.0 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/NT 1.0 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock REXECD/95 1.0.2 (Intel) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock REXECD/95 1.0.1 (Intel) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock REXECD/95 1.0 (Intel) - Microsoft Windows 95 - Microsoft Windows 98
Not Vulnerable:

Denicomp rexecd Denial of Service Vulnerability

rexec (ie "remote exec") was originally a Unix utility allowing the execution of a non-interactive program on another system running the server component 'rexecd'.

The daemon listens for connections coming from an rexec command through TCP/IP, and, on receiving a connection, validates access and executes the specified program.

Denicomp has ported a version of rexecd to Windows NT and Windows 9x. A denial of service vulnerability exists in these ports of rexecd.

If an abnormally long sequence of characters is sent to the port on which the daemon is listening, the service will terminate, and must be restarted manually. This allows a remote user to carry out denial of service attacks on the rexecd service.

Denicomp rexecd Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Denicomp rexecd Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Denicomp rexecd Denial of Service Vulnerability

References:

• Denicomp Products Page (Denicomp)