bugtraq - IBM Director 3.1 Windows Agent Remote DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 5 Apr 2004 18:28:14 -0000
From: Juanma Merino <t3k@...rnet.com>
To: bugtraq@...urityfocus.com
Subject: IBM Director 3.1 Windows Agent Remote DoS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Security Advisory by Juanma Merino

Remote DoS on  IBM Director 3.1 Agent for Windows

Reported to esCERT UPC on: May 2003 (no response)

Vendor contacted on: March 1, 2004 (no response)

Vendor: IBM (www.ibm.com) 

Systems Affected:

IBM Director 3.1 Agent for Windows

    - Windows 2000 professional SP3, SP4

    - Windows NT4 SP6a

    - Other Windows flavours not tested but probably affected too.

Description:

When running Amap (www.thc.org) in order to discover what protocol is
running on TCP port 14247, IBM Director Agent for Windows crashes.

On the Window System Event Log two events shows the crash. Restart
services is needed in order to recover functionality.

Detailed advisory is publish on:
http://t3k.ibernet.com//Director31ad.html  

Note: I have no answer from IBM. I don't know if they've send my
email to the trash or if they are working on it. So I've decided to
post the vulnerability. If someone with greater skills wants to take
a look contact me so I have more information regarding this
vulnerability.

E-mail: jmmerino[at]jazzfree.com

- ----------------------------------------------------------------
Juanma Merino
http://t3k.ibernet.com 
- -----------------------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6-2 (MingW32) - WinPT 0.5.5

iD8DBQFAcaQzlwxPI76KvK0RAjTbAKCZn4DosO+zBXnvbTY2GJwkgrVL2gCcD+/1
Ad5360qnOKGaVOVY1h/F184=
=DLpP
-----END PGP SIGNATURE-----