https://www.exploit-db.com/exploits/23508
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200412-321

SwitchOff是一款简单易用的托盘式系统工具，可自动执行经常使用的操作，如关闭或重启动计算机，关闭拨号连接等。SwitchOff对超大包请求缺少正确处理，远程攻击者可以利用这个漏洞对服务程序进行拒绝服务攻击。发送超过20240字节(追加两个CrLfs)数据到SwitchOff监听的8000/TCP管理端口，可使SwitchOff引用程序进入无限循环。问题代码存在于’swnet.dll’中，此漏洞可消耗大量CPU和使程序崩溃。

source: http://www.securityfocus.com/bid/9339/info

A problem has been identified in the YaSoft Switch Off software package when handling large packets via the service management port (8000/TCP). This may make it possible for a remote user to deny service to legitimate users of the service. 

perl -e "print 'a'x10240 . chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a);" > DoS.txt

nc 127.0.0.1 8000 < DoS.txt

来源:XF
名称:switch-off-swnet-dos(14123)
链接:http://xforce.iss.net/xforce/xfdb/14123
来源:BID
名称:9339
链接:http://www.securityfocus.com/bid/9339
来源:BUGTRAQ
名称:20040102SwitchOffMultipleVulnerabilities
链接:http://www.securityfocus.com/archive/1/348693
来源:www.elitehaven.net
链接:http://www.elitehaven.net/switchoff.txt
来源:SECTRACK
名称:1008581
链接:http://securitytracker.com/id?1008581
来源:SECUNIA
名称:10521
链接:http://secunia.com/advisories/10521
来源：NSFOCUS
名称：5876
链接：http://www.nsfocus.net/vulndb/5876