Ethereal-dev: [Ethereal-dev] LDAP DoS

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Nicolas Gregoire <ngregoire@xxxxxxxxxxxx>
Date: Sat, 14 May 2005 00:30:04 +0200
Hello,

I ran fuzz-test.sh on some of my pcap files, and ethereal crashed on a
modified LDAP packet. The problem seems to be in the 0x80 located at the
beginning of the payload.

The attached file could be used to reproduce the bug (tested on 0.10.11)


Regards,
-- 
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoire@xxxxxxxxxxxx ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F  FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F

Attachment: ldap-crash.pcap
Description: Binary data