Some DoS in some telnet servers

2008.01.09

Credit: Luigi Auriemma

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2008-0151

CWE: CWE-119

CVSS Base Score: 10/10

Impact Subscore: 10/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Complete

Integrity impact: Complete

Availability impact: Complete

Some advisories about Denial of Service (and partial DoS) vulnerabilities
in some telnet servers for Windows... nothing special:

Crash in Foxit WAC Server 2.1.0.910
  http://aluigi.org/adv/waccaz-adv.txt

Denial of Service in Pragma FortressSSH 5.0.4.293
  http://aluigi.org/adv/pragmassh-adv.txt

Denial of Service in Pragma TelnetServer 7.0.4.589
  http://aluigi.org/adv/pragmatel-adv.txt

Exception message in Seattle Lab Telnet Server 4.1.1.3758
  http://aluigi.org/adv/slnetmsg-adv.txt

Exception message in VanDyke VShell 3.0.3.569 
  http://aluigi.org/adv/vshellmsg-adv.txt

--- 
Luigi Auriemma
http://aluigi.org

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Some DoS in some telnet servers

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.