Details of VAR-200412-1187

ID

VAR-200412-1187

CVE

CVE-2004-1792

TITLE

YaSoft Switch Off Oversized Remote Denial of Service Attack Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200412-321

DESCRIPTION

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000). This may make it possible for a remote user to deny service to legitimate users of the service. Switch Off is an easy-to-use tray-based system tool that automates frequently used operations, such as shutting down or restarting a computer, closing a dial-up connection, and more. The problematic code exists in \'\'swnet.dll\'\', this vulnerability can consume a lot of CPU and crash the program

Trust: 1.26

sources: NVD: CVE-2004-1792 // BID: 9339 // VULHUB: VHN-10222

AFFECTED PRODUCTS

vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.0	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.5	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.1	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.2	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.4	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	0.7	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.3	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.5.1	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.6	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.7	Trust: 1.6
vendor:	yatsoft	model:	switch off	scope:	eq	version:	2.1	Trust: 1.0
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.8	Trust: 1.0
vendor:	yatsoft	model:	switch off	scope:	eq	version:	2.0	Trust: 1.0
vendor:	yatsoft	model:	switch off	scope:	eq	version:	1.9	Trust: 1.0
vendor:	yatsoft	model:	switch off	scope:	eq	version:	2.2	Trust: 1.0
vendor:	yatsoft	model:	switch off	scope:	eq	version:	2.3	Trust: 1.0
vendor:	y soft	model:	switch off	scope:	eq	version:	2.3	Trust: 0.3

sources: BID: 9339 // CNNVD: CNNVD-200412-321 // NVD: CVE-2004-1792

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2004-1792
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200412-321
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-10222
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2004-1792
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-10222
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-10222 // CNNVD: CNNVD-200412-321 // NVD: CVE-2004-1792

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-1792

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200412-321

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200412-321

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-10222

EXTERNAL IDS

db:	BID	id:	9339	Trust: 2.0
db:	SECTRACK	id:	1008581	Trust: 1.7
db:	SECUNIA	id:	10521	Trust: 1.7
db:	NVD	id:	CVE-2004-1792	Trust: 1.7
db:	CNNVD	id:	CNNVD-200412-321	Trust: 0.7
db:	BUGTRAQ	id:	20040102 SWITCH OFF MULTIPLE VULNERABILITIES	Trust: 0.6
db:	NSFOCUS	id:	5876	Trust: 0.6
db:	XF	id:	14123	Trust: 0.6
db:	EXPLOIT-DB	id:	23508	Trust: 0.1
db:	SEEBUG	id:	SSVID-77269	Trust: 0.1
db:	VULHUB	id:	VHN-10222	Trust: 0.1

sources: VULHUB: VHN-10222 // BID: 9339 // CNNVD: CNNVD-200412-321 // NVD: CVE-2004-1792

REFERENCES

url:	http://www.securityfocus.com/bid/9339	Trust: 1.7
url:	http://www.securityfocus.com/archive/1/348693	Trust: 1.7
url:	http://www.elitehaven.net/switchoff.txt	Trust: 1.7
url:	http://securitytracker.com/id?1008581	Trust: 1.7
url:	http://secunia.com/advisories/10521	Trust: 1.7
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/14123	Trust: 1.1
url:	http://xforce.iss.net/xforce/xfdb/14123	Trust: 0.6
url:	http://www.nsfocus.net/vulndb/5876	Trust: 0.6
url:	http://yasoft.km.ru/eng/switchoff/	Trust: 0.3
url:	/archive/1/348693	Trust: 0.3

sources: VULHUB: VHN-10222 // BID: 9339 // CNNVD: CNNVD-200412-321 // NVD: CVE-2004-1792

CREDITS

Peter Winter-Smith※ peter4020@hotmail.com

Trust: 0.6

sources: CNNVD: CNNVD-200412-321

SOURCES

db:	VULHUB	id:	VHN-10222
db:	BID	id:	9339
db:	CNNVD	id:	CNNVD-200412-321
db:	NVD	id:	CVE-2004-1792

LAST UPDATE DATE

2024-08-14T15:25:42.010000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-10222	date:	2017-07-11T00:00:00
db:	BID	id:	9339	date:	2004-01-02T00:00:00
db:	CNNVD	id:	CNNVD-200412-321	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2004-1792	date:	2017-07-11T01:31:21.187

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-10222	date:	2004-12-31T00:00:00
db:	BID	id:	9339	date:	2004-01-02T00:00:00
db:	CNNVD	id:	CNNVD-200412-321	date:	2004-01-02T00:00:00
db:	NVD	id:	CVE-2004-1792	date:	2004-12-31T05:00:00