Packeteer PacketShaper多个缓冲区溢出拒绝服务漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1111964 漏洞类型 缓冲区溢出
发布时间 2007-01-08 更新时间 2007-01-15
CVE编号 CVE-2007-0113 CNNVD-ID CNNVD-200701-047
漏洞平台 Hardware CVSS评分 6.8
|漏洞来源
https://www.exploit-db.com/exploits/29402
https://cxsecurity.com/issue/WLB-2007010026
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200701-047
|漏洞详情
PacketShaper可以为服务供应商提供重要的IP带宽供应与管理解决方案。PacketShaper在处理超长畸形的用户请求时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞导致服务器崩溃重启。如果向PacketShaper发送了带有超长参数(大约1500字节)的有效命令的话,就可能触发缓冲区溢出,导致拒绝服务。watchdog定时器会要求系统重启,这个过程大约需要30秒。这时如果没有设置bypass机制的话,服务就会中断。
|漏洞EXP
source: http://www.securityfocus.com/bid/21933/info

Packeteer PacketShaper is prone to multiple denial-of-service vulnerabilities.

A remote attacker may exploit these issues to cause the device to crash, denying further service to legitimate users.

Packeteer PacketShaper Version 8.0 is vulnerable to these issues; other versions may also be affected.

https://www.example.com/clastree.htm?POLICY=/Inbound/Filesharing/BitTorrent/Ax1500

# class show /Inbound/Ax1500mailto:vuldb@securityfocus.com
|参考资料

来源:XF
名称:packetshaper-argument-dos(31357)
链接:http://xforce.iss.net/xforce/xfdb/31357
来源:BID
名称:21933
链接:http://www.securityfocus.com/bid/21933
来源:BUGTRAQ
名称:20070108PacketeerPacketWiseCLIoverflowDoS
链接:http://www.securityfocus.com/archive/1/archive/1/456267/100/0/threaded
来源:VUPEN
名称:ADV-2007-0098
链接:http://www.frsirt.com/english/advisories/2007/0098
来源:SECUNIA
名称:23685
链接:http://secunia.com/advisories/23685
来源:OSVDB
名称:31656
链接:http://osvdb.org/31656
来源:SREASON
名称:2110
链接:http://securityreason.com/securityalert/2110