CVE-2004-1792

Vulnerability

swnet.dll in YaSoft Switch Off 2.3 and earlier contains a flaw where processing a long packet with two CRLF sequences on the service management port (TCP 8000) causes an infinite loop in the DLL. This leads to a denial-of-service condition. The vulnerability is reachable from the network without any prior authentication or special configuration [1].

Exploitation

An unauthenticated remote attacker needs only network access to TCP port 8000 of the target. By sending a malformed packet that includes a long payload terminated with two CRLF sequences, the attacker triggers the infinite loop in swnet.dll. No user interaction or elevated privileges are required [1].

Impact

Successful exploitation results in a complete denial of service for the YaSoft Switch Off service. The affected component enters an infinite loop, consuming CPU resources and rendering the management port unresponsive. No data is disclosed or modified, and the attacker does not gain code execution [1].

Mitigation

No specific patch or fixed version is mentioned in the available reference [1]. Users are advised to restrict access to TCP port 8000 via firewall rules or deactivate the service if not required. Contacting the vendor for an updated version may also be necessary.