PT-2004-2692 · Yabsoft · Yasoft Switch Off

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1792

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions YaSoft Switch Off versions 2.3 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a long packet with two CRLF sequences to the service management port, which is TCP 8000.

Recommendations For YaSoft Switch Off versions 2.3 and earlier, consider restricting access to the service management port (TCP 8000) to minimize the risk of exploitation. As a temporary workaround, limit the packet length accepted by the service to prevent infinite loops.

Exploit

Correção

Identificadores relacionados

CVE-2004-1792

Produtos afetados

Yasoft Switch Off

Referências · 8

• 🔥 http://secunia.com/advisories/10521 · Exploit
• 🔥 http://securitytracker.com/id?1008581 · Exploit
• 🔥 http://elitehaven.net/switchoff.txt · Exploit
• 🔥 http://securityfocus.com/archive/1/348693 · Exploit
• 🔥 https://exploit-db.com/exploits/23508 · Exploit
• 🔥 http://securityfocus.com/bid/9339 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1792 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14123 · Nota