PCAnywhere32 Denial of Service Vulnerability
BID:288
Info
PCAnywhere32 Denial of Service Vulnerability
| Bugtraq ID: | 288 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Unknown |
| Published: | May 11 1999 12:00AM |
| Updated: | May 11 1999 12:00AM |
| Credit: | This vulnerability was posted to NTBugtraq by Chris Radigan <[email protected]>. |
| Vulnerable: |
Symantec PCAnywhere32 8.0 |
| Not Vulnerable: | |
Discussion
PCAnywhere32 Denial of Service Vulnerability
Servers running PCAnywhere32 with TCP/IP networking are subject to a Denial of Service attack that will hang the server at 100% CPU utilization. A malicious user may initiate this DoS by connecting to tcp port 5631 on the PCAnywhere server input a large amount of data when prompted with "Please press <Enter>".
Servers running PCAnywhere32 with TCP/IP networking are subject to a Denial of Service attack that will hang the server at 100% CPU utilization. A malicious user may initiate this DoS by connecting to tcp port 5631 on the PCAnywhere server input a large amount of data when prompted with "Please press <Enter>".
Exploit / POC
PCAnywhere32 Denial of Service Vulnerability
Connect to tcp 5631. At the Please press <Enter> prompt, transfer a large amount of data to the PCAnywhere server. This will peg the CPU utilization at 100%.
Connect to tcp 5631. At the Please press <Enter> prompt, transfer a large amount of data to the PCAnywhere server. This will peg the CPU utilization at 100%.
Solution / Fix
PCAnywhere32 Denial of Service Vulnerability
Solution:
Symantec has created a patched aw32tcp.dll to correct this problem.
Solution:
Symantec has created a patched aw32tcp.dll to correct this problem.
References
PCAnywhere32 Denial of Service Vulnerability
References:
References: