Windows95 Proxy DoS Vulnerabilites

ryannTHE-BRIDGE.NET

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: J.A. Gutierrez: "more about 'at'"
• Previous message: Chris Adams: "Re: SECURITY: redhat, the saga continues.."

While playing with a proxy server the other day, I have accidently
stumbled across two remote bugs in numerous proxy servers. Those
affected are "WinGate and StarTech". Both companies have been previously
notified of their vulnerability, and in WinGate's case I guess it has
been patched already.

The bug is pretty straight forward, telnet to the proxy server at its
pop3 port and type

For WinGate:
    USER x#99999.....

    With lots of nine's, the proxy server stops responding and needs to
be restarted.

For Startech:
     USER x<9999999.....>

      Once again, as many nines as possible, startech quits responding.

In Startech's case, this can also be done in the telnet daemon part of
it also...

Havent tried much others...

My Startech proxy server did not have a version number on it, and the
Wingate's wasn't available. Sorry, I will try to get this in tommarrow
if neccessary...


    -Ryan
     (ryannthe-bridge.net / http://www.the-bridge.net/~ryann)

• Next message: J.A. Gutierrez: "more about 'at'"
• Previous message: Chris Adams: "Re: SECURITY: redhat, the saga continues.."