Sage Software MAS 200 Denial of Service Vulnerability

Bugtraq ID:	3221
Class:	Unknown
CVE:	CVE-2001-1070
Remote:	Yes
Local:	No
Published:	Aug 21 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	This vulnerability was originally reported by "Administrator" <[email protected]>
Vulnerable:	Sage Software MAS 200 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0
Not Vulnerable:

Sage Software MAS 200 Denial of Service Vulnerability

MAS 200 is a client/server accounting platform which runs on 32-bit Windows platforms.

A user is able to connect to port 10000 on a server running MAS 200. Once connected, the user can enter the <control> x key combination ten times to disable the server side application. This results in a denial of services.

Sage Software MAS 200 Denial of Service Vulnerability

An attacker may exploit this vulnerability with standard network utilities, such as a telnet client or netcat.

Sage Software MAS 200 Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sage Software MAS 200 Denial of Service Vulnerability

References:

• Sage Software Home Page (Sage Software)