GoodTech Telnet Server Remote Denial Of Service Vulnerability

Bugtraq ID:	9337
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 02 2004 12:00AM
Updated:	Jan 02 2004 12:00AM
Credit:	Discovery is credited to Donato Ferrante.
Vulnerable:	GoodTech Telnet Server 4.0 .103 GoodTech Telnet Server 4.0
Not Vulnerable:	GoodTech Telnet Server 4.0 .104

GoodTech Telnet Server Remote Denial Of Service Vulnerability

GoodTech Telnet Server is reportedly prone to a denial of service vulnerability. This condition occurs prior to authentication when excessive data is received by the server. Exploitation could result in memory corruption, which could in turn be leveraged to execute arbitrary code, though this has not been confirmed by Symantec.

This vulnerability appears similar in nature to BID 862, though the amount of data required to trigger the issue is different.

GoodTech Telnet Server Remote Denial Of Service Vulnerability

The following example was provided:

perl -e 'print "a"x8245' | nc www.example.com 23

GoodTech Telnet Server Remote Denial Of Service Vulnerability

Solution:
This issue has been reportedly addressed in version 4.0.104. As the server is a commercial product, affected users should contact the vendor to obtain upgrades.

GoodTech Telnet Server Remote Denial Of Service Vulnerability

References:

• GoodTech Systems Homepage (GoodTech Systems)
  
• Telnet Server Homepage (GoodTech Systems)
  
• DoS in GoodTech Telnet Server 4.0.103 ("Donato Ferrante" )