BID:2692

Denicomp rshd Denial of Service Vulnerability

Info

Denicomp rshd Denial of Service Vulnerability

Bugtraq ID:	2692
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2001 12:00AM
Updated:	May 03 2001 12:00AM
Credit:	Reported to bugtraq by SNS Research <[email protected]>
Vulnerable:	Denicomp Winsock RSHD/NT 2.18 .00 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.7 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.7 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.6 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.5 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.4 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.3 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.2 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17.1 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17 .07 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.17 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.16 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.16 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.15 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.15 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.14 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.14 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.13 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.13 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.12 (Intel) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/NT 2.12 (Alpha) - Microsoft Windows 2000 Professional - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 Denicomp Winsock RSHD/95 2.18 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock RSHD/95 2.17 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock RSHD/95 2.16 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock RSHD/95 2.15 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock RSHD/95 2.14 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98 Denicomp Winsock RSHD/95 2.13 (Win 9x) - Microsoft Windows 95 - Microsoft Windows 98

Not Vulnerable:

Discussion

Denicomp rshd Denial of Service Vulnerability

rsh (ie "remote shell") was originally a Unix utility which allows the execution of a non-interactive program on another system running the server component, 'rshd'.

The daemon listens for connections coming from an rsh command through TCP/IP, and, on receiving a connection, validates access and executes the specified program.

Denicomp has ported a version of rshd to Windows NT and Windows 9x. A denial of service vulnerability exists in these ports of rshd.

If an abnormally long sequence of characters is sent to the port on which the daemon is listening, the service will terminate, and must be restarted manually. This allows a remote user to carry out denial of service attacks on the rshd service.

Exploit / POC

Denicomp rshd Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Denicomp rshd Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

References

Denicomp rshd Denial of Service Vulnerability

References:

Denicomp Products Page (Denicomp)