Re: OSX ICQ DoS

From: Stephen (sa7oriat_private)
Date: Tue Feb 05 2002 - 08:11:47 PST

  • Next message: Drew Simonis: "Re: NetScreen ScreenOS 2.6 Subject to Trust Interface DoS"

    oi, and as a minor addendum, I forgot to note the port number.
    it seems that the OSX ICQ clients tend to bind to ports 49152 and
    49159 so youll probably want to use those for default attempts,
    otherwise just nmap -p49100-49200 or something to find it.
    
    On Tue, 5 Feb 2002, Stephen wrote:
    
    > Hello,
    > 	I looked a bit for this problem on the web, and cant find it so
    > I am posting it here. Yeah, so its a lame DoS for several versions of
    > OSX's ICQ clients. Version information is in the comment space of the
    > proof of concept exploit code I have included below. This was a quick
    > hack based on some code I authored that exploited a similar problem with
    > some earlier versions of Licq. I was learning basic socket coding at the
    > time I wrote the Licq thingy, but nonetheless here is the code that works
    > on ICQ MacOSX Ver 2.6x Beta Build 7 and others.
    >
    >
    >
    



    This archive was generated by hypermail 2b30 : Tue Feb 05 2002 - 10:15:36 PST