OmniCom winShadow Server Login Denial of Service Vulnerability
BID:8719
Info
OmniCom winShadow Server Login Denial of Service Vulnerability
| Bugtraq ID: | 8719 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2003 12:00AM |
| Updated: | Sep 29 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to Bahaa Naamneh <[email protected]>. |
| Vulnerable: |
OmniCom winShadow 2.0 |
| Not Vulnerable: | |
Discussion
OmniCom winShadow Server Login Denial of Service Vulnerability
It has been reported that OmniCom winShadow server may be prone to a remote denial of service vulnerability that could allow a remote attacker to cause the software to crash. The issue may be exploited by sending long string values to the server for user name and password during the login process. Although unconfirmed this issue may also be exploited to execute arbitrary code on a vulnerable system.
Successful exploitation of this issue may allow an attacker to cause the software to crash or hang.
OmniCom winShadow version 2.0 has been reported to be prone to this issue, however other versions may be affected as well.
It has been reported that OmniCom winShadow server may be prone to a remote denial of service vulnerability that could allow a remote attacker to cause the software to crash. The issue may be exploited by sending long string values to the server for user name and password during the login process. Although unconfirmed this issue may also be exploited to execute arbitrary code on a vulnerable system.
Successful exploitation of this issue may allow an attacker to cause the software to crash or hang.
OmniCom winShadow version 2.0 has been reported to be prone to this issue, however other versions may be affected as well.
Exploit / POC
OmniCom winShadow Server Login Denial of Service Vulnerability
Exploit code has been provided and may downloaded from the following location:
http://www.elitehaven.net/winshadow.zip
Exploit code has been provided and may downloaded from the following location:
http://www.elitehaven.net/winshadow.zip
Solution / Fix
OmniCom winShadow Server Login Denial of Service Vulnerability
Solution:
The vendor has released a fix for this issue. Please see the reference section to contact the vendor for more information and details on obtaining the fix.
Solution:
The vendor has released a fix for this issue. Please see the reference section to contact the vendor for more information and details on obtaining the fix.