Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13997
HistoryAug 21, 2006 - 12:00 a.m.

DoS 2wire Gateway

2006-08-2100:00:00
vulners.com
12

[Refer:http://www.mexhackteam.org/prethoonker/DoS_ADV_2Wire.txt]

#################################################### << Denegation of Service >>

2 w i r e G a t e w a y

Preth00nker [at] gmail [dot] com

BY PRETH00NKER

http://mexhackteam.org

Special dedication for my friends of:

< < http://www.elhacker.net > >

######################################################

[ Introduction ]

(*) 2wire Gateway User Interface: It Work with the Modems / Routers
of 2Wire, Inc., it take the work out of manage a local network.
the Users see important information about the DSL connection,
devices on the network, firewall logs, and more. Optional notification
features let users know if there is a problem and guides them to a fix.

(*) CRLF: It's a special character or sequence of characters
signifying the end of a line of text.

[Char] [ Complete name ] [Hex] [ascii]
CR = Carriage Return = \0A = 10
LF = Line_Feed = \0D = 13

[ Explanation ]

When a evil request is maked and sended at 2wire Webserver
and this can't process the request, result as a Denegation
of service (DoS).
The error comes at the moment of include a End_of_line (CRLF)
into any variable, when we're using a GET method it's
imposible (inside a normal situation), but, it's really true?..

[ PoC ]

http://www.mexhackteam.org/prethoonker/DoS&#37;20&#37;20.cpp