Re: Arescom NetDSL-1000 DoS atack source

[Pim van Riezen <pi () madscience nl>]

On Jan 30, 2006, at 2:51 PM, framirez () akori fr wrote:

> 	  If you flood the telnet configuration a couple dozen times with  
> long
> 	strings, eventually the telnetd service flat out dies. Routing  
> functions
> 	of the NetDSL continue to work fine as before. It is unknown  
> whether only
> 	the telnetd service is affected, other means of remote  
> configuration may
>         have become unavailable as well.

I reported this vulnerability to bugtraq on 2002-02-09. Nice to see  
that now, four years later, the vulnerability still exists.

Cheers,
Pi