VULHUB ™

rexec (ie "remote exec") was originally a Unix utility allowing the execution of a non-interactive program on another system running the server component 'rexecd'. The daemon listens for connections coming from an rexec command through TCP/IP, and, on receiving a connection, validates access and executes the specified program. Denicomp has ported a version of rexecd to Windows NT and Windows 9x. A denial of service vulnerability exists in these ports of rexecd. If an abnormally long sequence of characters is sent to the port on which the daemon is listening, the service will terminate, and must be restarted manually. This allows a remote user to carry out denial of service attacks on the rexecd service.

rexec (ie "remote exec") was originally a Unix utility allowing the execution of a non-interactive program on another system running the server component 'rexecd'. The daemon listens for connections coming from an rexec command through TCP/IP, and, on receiving a connection, validates access and executes the specified program. Denicomp has ported a version of rexecd to Windows NT and Windows 9x. A denial of service vulnerability exists in these ports of rexecd. If an abnormally long sequence of characters is sent to the port on which the daemon is listening, the service will terminate, and must be restarted manually. This allows a remote user to carry out denial of service attacks on the rexecd service.