diff options
Diffstat (limited to 'informationals/teso-i0005.txt')
| -rw-r--r-- | informationals/teso-i0005.txt | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/informationals/teso-i0005.txt b/informationals/teso-i0005.txt new file mode 100644 index 0000000..eda8329 --- /dev/null +++ b/informationals/teso-i0005.txt | |||
| @@ -0,0 +1,35 @@ | |||
| 1 | 0005 2000/01/22 Ascend ISDN Router DoS vulnerability (old UDP echo problem) | ||
| 2 | |||
| 3 | ==== TESO Informational ======================================================= | ||
| 4 | This piece of information is to be kept confidential. | ||
| 5 | =============================================================================== | ||
| 6 | |||
| 7 | Description ..........: Ascend ISDN Router DoS vulnerability | ||
| 8 | Date .................: 2000/01/22 21:00 | ||
| 9 | Author ...............: scut | ||
| 10 | Publicity level ......: known | ||
| 11 | Affected .............: unfirewalled Ascend ISDN Routers, for example Ascend | ||
| 12 | Pipeline 50 routers | ||
| 13 | Type of entity .......: Router | ||
| 14 | Type of discovery ....: denial of service attack | ||
| 15 | Severity/Importance ..: interesting | ||
| 16 | Found by .............: hendy and scut | ||
| 17 | |||
| 18 | Information =================================================================== | ||
| 19 | |||
| 20 | A standard Ascend ISDN router has the UDP echo port open. By spoofing the | ||
| 21 | source IP address as the destination IP address of the router and sending a UDP | ||
| 22 | packet to the router the router will keep the packet within it's internal | ||
| 23 | packet table forever. However this is a very old denial of service attack, but | ||
| 24 | it has some nice effects here. | ||
| 25 | |||
| 26 | For example by sending packets of 500 bytes length you can constantly increase | ||
| 27 | the generic router delay time from 0 ms to up to 800 ms. After that the router | ||
| 28 | packet table is completely overflowed and the router is inoperational. In this | ||
| 29 | state the only thing that will help is a hard reset of the router. | ||
| 30 | |||
| 31 | This is just the old echo/echo UDP link problem, but still living very happily | ||
| 32 | in any Ascend ISDN router. | ||
| 33 | |||
| 34 | =============================================================================== | ||
| 35 | |||
