Thomson Cable Modem Remote Denial Of Service Vulnerability

Bugtraq ID:	9091
Class:	Boundary Condition Error
CVE:	CVE-2003-1085
Remote:	Yes
Local:	No
Published:	Nov 24 2003 12:00AM
Updated:	Jul 12 2009 12:56AM
Credit:	Discovery credited to Andrés Tarascó.
Vulnerable:	Thomson TCW690 Cable Modem ST42.03.0a Thomson TCW 690 Cable Modem Thomson TCM 315 Cable Modem Thomson TCM 305 Cable Modem
Not Vulnerable:

Thomson Cable Modem Remote Denial Of Service Vulnerability

A problem has been identified in Thomson Cable Modems when handling long requests on the HTTP port. Because of this, it may be possible for an attacker to deny service to legitimate users of the device.

Thomson Cable Modem Remote Denial Of Service Vulnerability

The following exploit was contributed by Administrador de ShellSec:

• /data/vulnerabilities/exploits/thomson-dos.c

Thomson Cable Modem Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Thomson Cable Modem Remote Denial Of Service Vulnerability

References:

• Thomnson TCM315 Denial of service (Administrador de ShellSec)
  
• Thomnson TCM315 Denial of service (Administrador de ShellSec )