PT-2004-2692 · Yabsoft · Yasoft Switch Off

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1792

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions YaSoft Switch Off versions 2.3 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a long packet with two CRLF sequences to the service management port, which is TCP 8000.

Recommendations For YaSoft Switch Off versions 2.3 and earlier, consider restricting access to the service management port (TCP 8000) to minimize the risk of exploitation. As a temporary workaround, limit the packet length accepted by the service to prevent infinite loops.

Exploit

Fix

Related Identifiers

CVE-2004-1792

Affected Products

Yasoft Switch Off

References · 8

• 🔥 http://secunia.com/advisories/10521 · Exploit
• 🔥 http://securitytracker.com/id?1008581 · Exploit
• 🔥 http://elitehaven.net/switchoff.txt · Exploit
• 🔥 http://securityfocus.com/archive/1/348693 · Exploit
• 🔥 https://exploit-db.com/exploits/23508 · Exploit
• 🔥 http://securityfocus.com/bid/9339 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1792 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14123 · Note