bugtraq - Remote iodinetd DoS vulnerability on Debian Lenny

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 26 Apr 2009 19:00:41 +0200
From: Albert Sellarès <whats@...k.net>
To: bugtraq@...urityfocus.com
Subject: Remote iodinetd DoS vulnerability on Debian Lenny

Hi,

I attach an exploit that lets you shutdown a remote iodinet server
(version <= 0.4.2). This bug was found some weeks before on Debian
Lenny, but it hasn't been fixed in the stable branch and the bug has
been closed :S.

This is the Debian bug:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521260

Greetings.

-- 
  Albert Sellarès        GPG id: 0x13053FFE
  http://www.wekk.net    whats@...ber.org 
  Linux User: 324456                

Download attachment "shoot-iodined" of type "application/x-perl" (1565 bytes)

Download attachment "signature.asc" of type "application/pgp-signature" (198 bytes)