Symantec PCAnywhere32 8.0 - Denial of Service

Author: Chris Radigan
type: dos
platform: multiple
port: 0
date_added: 1999-05-11
date_updated: 2012-06-16
verified: 1
codes: CVE-1999-1028;OSVDB-4720
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/288/info

Servers running PCAnywhere32 with TCP/IP networking are subject to a Denial of Service attack that will hang the server at 100% CPU utilization. A malicious user may initiate this DoS by connecting to tcp port 5631 on the PCAnywhere server input a large amount of data when prompted with "Please press <Enter>".

Connect to tcp 5631. At the Please press <Enter> prompt, transfer a large amount of data to the PCAnywhere server. This will peg the CPU utilization at 100%.