GoodTech Telnet Server NT DoS Vulnerability

Bugtraq ID:	862
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Dec 06 1999 12:00AM
Updated:	Dec 06 1999 12:00AM
Credit:	Posted to Bugtraq by USSR Labs on Dec 6, 1999.
Vulnerable:	GoodTech Telnet Server NT 2.2.1 - Microsoft Windows NT 4.0
Not Vulnerable:

GoodTech Telnet Server NT DoS Vulnerability

GoodTech Telnet Server NT 2.2.1 is vulnerable to a remote denial of service attack due to an unchecked buffer. If 23870 or more characters are entered at the username prompt, the software will crash.

GoodTech's Telnet Server 95/98 may also be vulnerable to this overflow.

GoodTech Telnet Server NT DoS Vulnerability

$ telnet victimhost

Trying victimhost...
Connected to victimhost.
Escape character is '^]'.

Welcome to GoodTech Telnet Server for Windows NT (V2.2) (Evaluation Copy)

(C) Copyright 1996-1999 GoodTech Systems, Inc.


Login username: (32870 characters)

...server crash

GoodTech Telnet Server NT DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

GoodTech Telnet Server NT DoS Vulnerability

References:

• GoodTech Systems Homepage (GoodTech Systems)