Description
The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unstable service) via a long GET request, possibly caused by a buffer overflow.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service EDB-25124 · dos · Feb 19, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20031123 Thomnson TCM315 Denial of service mailing-list
- 20050219 Thomson TCW690 Denial Of Service Vulnerability mailing-list
- 20031124 Thomnson TCM315 Denial of service mailing-list
- 14353 third-party-advisory
- 20050219 Re: [Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability mailing-list
- thomson-http-get-dos(13815) vdb-entry
- 20031123 Thomnson TCM315 Denial of service mailing-list
- http://www.shellsec.net/leer_advisory.php?id=2
- 10286 third-party-advisory
- 9091 vdb-entry