McAfee Remote Desktop Denial of Service Vulnerability

Bugtraq ID:	2726
Class:	Unknown
CVE:	CVE-2001-0612
Remote:	Yes
Local:	No
Published:	May 16 2001 12:00AM
Updated:	Jul 11 2009 06:06AM
Credit:	This vulnerability was posted to BugTraq by altomo <[email protected]> from NudeHackersDotCom on May 16th, 2001.
Vulnerable:	McAfee Remote Desktop 32 3.0 McAfee Remote Desktop 32 2.1.2
Not Vulnerable:

McAfee Remote Desktop Denial of Service Vulnerability

McAfee Remote Desktop is a remote access utility for Microsoft Windows 9x/ME/NT systems.

It is possible for remote users to temporarily freeze McAfee Remote Desktop if a large amount of data is sent to port 5045. This may be due to a buffer overflow condition, however this is not confirmed.

Repeated attacks may result in a prolonged denial of service.

McAfee Remote Desktop Denial of Service Vulnerability

Use netcat or another such utility to send large amounts of data to port 5045 on the target host.

McAfee Remote Desktop Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

McAfee Remote Desktop Denial of Service Vulnerability

References: