[ http://www.rootshell.com/ ] Date: Thu, 2 Jul 1998 20:37:32 -0500 From: Ryan Nichols Subject: Windows95 Proxy DoS Vulnerabilites While playing with a proxy server the other day, I have accidently stumbled across two remote bugs in numerous proxy servers. Those affected are "WinGate and StarTech". Both companies have been previously notified of their vulnerability, and in WinGate's case I guess it has been patched already. The bug is pretty straight forward, telnet to the proxy server at its pop3 port and type For WinGate: USER x#99999..... With lots of nine's, the proxy server stops responding and needs to be restarted. For Startech: USER x<9999999.....> Once again, as many nines as possible, startech quits responding. In Startech's case, this can also be done in the telnet daemon part of it also... Havent tried much others... My Startech proxy server did not have a version number on it, and the Wingate's wasn't available. Sorry, I will try to get this in tommarrow if neccessary... -Ryan (ryann@the-bridge.net / http://www.the-bridge.net/~ryann)