Motorola SB5100E Cable Modem DoS

Hello.

Sending "land" packet to motorola device, will cause it to crash.

"LanD" packet is simple TCP syn packet:
Source IP = 192.168.100.1
Destanation IP = 192.168.100.1
Source Port = 80
Destanation Port =80
SYN  Flag= 1

One packet can crash modem and all network on cable part will be unreacheble.
Only physical restart can help.

May be other models are vulnerable.

Alexey Sintsov.
mailto:don_@xxxxxxxxxx

Relevant Pages

  • Re: Event ID 529 Question
    ... Logon Failure: ... Caller User Name: SERVER01$ ... There is no "Mickey" user on our network, so it worries me that we have a hacker trying to get in using brute force logins as this occurred 45 times. ... Usually when you get this you see a source port and source IP Address, ...
    (microsoft.public.windows.server.sbs)
  • Re: NAT external/Public IP
    ... because the original host's IP address and source port is unknown. ... doesn't matter if an attacker knows the address, or it isn't secure, ... if that network does not support port address ... public IP addresses in your LAN means that the firewall at the perimeter ...
    (Security-Basics)
  • DTCPing works, but distributed transaction cannot be started
    ... New transaction cannot enlist in the ... Network Name: HOSTA1 ... Source Port: 5069 ...
    (microsoft.public.sqlserver.clustering)
  • WARNING:the CID values for both test machines are the same
    ... I keep getting a MSTDC error when refreshing the group in Biztalk. ... configured MSTSC as described by Microsoft on the Biztalk server but still ... Network Name: rb-2k3-node01 ... Source Port: 1028 ...
    (microsoft.public.biztalk.server)
  • Re: Access Denied error on Mapped Drives (Event ID 529)
    ... BTW - The 'Source port' number in the Event's starts at '0' and then jumps ... All other network PC's access the ... > In the Event Viewer on the SBS server, there are entries in the Security ... > Logon Process: NtLmSsp ...
    (microsoft.public.windowsxp.security_admin)