DoS in Hotsync Manager (with network hotsync enabled)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tested with HotSync Manager version 4.0.4.0

If you connect to the port HotSync Manager listens on for a network =
request
telnet 127.0.0.1 14238

And send the data "OK    ATDT<" followed by CRLF

A message will appear
"Out of memory. Please free some memory, then choose retry"
It will give you option for abort, retry, ignore.

If you choose ignore, or retry, Hotsync Manager will just hang until the =
process is terminated.
If you choose abort, you get "Runtime Error!" abnormal program =
termination, and it will close.

I haven't seen this particular type of DoS on HotSync Manager anywhere.

Regards,
Gary H. Jones II
Point Blank Security
www.pointblanksecurity.com



[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux