Netopia Timbuktu Pro 2.0 DoS Vulnerability

Bugtraq ID:	984
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2000-0142
Remote:	Yes
Local:	Yes
Published:	Feb 11 2000 12:00AM
Updated:	Jul 11 2009 01:56AM
Credit:	Posted to Bugtraq on February 11, 2000 by Laurent Levier <[email protected]>.
Vulnerable:	Netopia Timbuktu Pro Remote Control 5.2.1 - Apple Mac OS 8 8.6 - Apple Mac OS 8 8.5 - Apple Mac OS 8 8.1 - Apple Mac OS 9 9.0 Netopia Timbuktu Pro Remote Control 2.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:	Netopia Timbuktu Pro 2000

Netopia Timbuktu Pro 2.0 DoS Vulnerability

Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process will need to be killed and the Timbuktu service is required to be stopped and restarted.

Netopia Timbuktu Pro 2.0 DoS Vulnerability

Connect and disconnect on TCP port 407.
Connect and disconnect on TCP port 1417.

Note: no data needs to be transferred.

MBernheim <[email protected]> has released the following shell script exploit:

• /data/vulnerabilities/exploits/timbuktu20.sh
• /data/vulnerabilities/exploits/

Netopia Timbuktu Pro 2.0 DoS Vulnerability

Solution:
This issue has been resolved in Timbuktu Pro 2000.

Netopia Timbuktu Pro 2.0 DoS Vulnerability

References:

• Netopia Timbuktu Pro Remote Control Product Webpage (Netopia)