PT-2008-1806 · Pragma · Pragma Telnetserver

Luigi Auriemma

·

Publicado

2008-01-09

·

Atualizado

2017-08-08

·

CVE-2008-0153

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Pragma TelnetServer version 7.0.4.589
Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and resource exhaustion. This is achieved by sending a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.
Recommendations For Pragma TelnetServer version 7.0.4.589, consider disabling the telnetd.exe service until a patch is available to prevent remote attackers from exploiting this issue. Restrict access to the telnet service to minimize the risk of exploitation. Avoid using the TELOPT PRAGMA LOGON telnet option in the affected service until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-0153

Produtos afetados

Pragma Telnetserver