PalmOS TCP Scan Remote Denial Of Service Vulnerability
BID:3847
Info
PalmOS TCP Scan Remote Denial Of Service Vulnerability
| Bugtraq ID: | 3847 |
| Class: | Design Error |
| CVE: |
CVE-2002-0116 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | This vulnerability was announced by Jason Lutz via Bugtraq on January 10, 2002. |
| Vulnerable: |
Palm Palm OS 3.5 h |
| Not Vulnerable: | |
Discussion
PalmOS TCP Scan Remote Denial Of Service Vulnerability
PalmOS is the commercial handheld software maintained and distributed by Palm. It is available for Personal Desktop Assistants (PDAs) manufactured by various vendors.
Some network-accessible PDAs become unstable when receiving a large amount of TCP connect() requests. Under some circumstances, when a PDA receives a large amount of connect() requests via some vector such as a TCP scan, the device becomes unstable. Often, this results in a crash, and requires resetting the device to resume normal operation. This problem is known to affect Handspring PDAs using PalmOS 3.5h and Xircom wireless ethernet adapters, as well as some Palm Vx PDAs.
PalmOS is the commercial handheld software maintained and distributed by Palm. It is available for Personal Desktop Assistants (PDAs) manufactured by various vendors.
Some network-accessible PDAs become unstable when receiving a large amount of TCP connect() requests. Under some circumstances, when a PDA receives a large amount of connect() requests via some vector such as a TCP scan, the device becomes unstable. Often, this results in a crash, and requires resetting the device to resume normal operation. This problem is known to affect Handspring PDAs using PalmOS 3.5h and Xircom wireless ethernet adapters, as well as some Palm Vx PDAs.
Exploit / POC
PalmOS TCP Scan Remote Denial Of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PalmOS TCP Scan Remote Denial Of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PalmOS TCP Scan Remote Denial Of Service Vulnerability
References:
References: