标题: NetworkActiv Web Server DoS [打印本页] 作者: 韩冰 时间: 2004-10-6 09:52 标题: NetworkActiv Web Server DoS Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".' _% |' s( M4 q& h' T; Q, ~
0 v6 B7 D# {- P |: KA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.) T D6 l( {$ M) p+ d* y/ K
- F$ H+ P, i: @, L; _% C Details</B><B>Vulnerable Systems:</B>- p3 J7 } ?# e* c# l
* NetworkActiv Web Server 1.0 prior to 28 September 2004 $ C& `/ b2 R8 \) y3 t( ?( N0 ` d# P/ m- ^" {# I* J
<B>Immune Systems:</B>& q4 h- \ ~6 J$ O9 s
* NetworkActiv Web Server 1.0 after 28 September 2004, Y. w( u- V/ W# T: ^# ]+ v% l
: }7 q4 {1 W8 d3 X! L) [$ O; N<B>Vendor response:</B>0 J h9 R! k/ {+ L
The vendor has issued a fix to prevent the vulnerability from happening. 7 B( \( g6 ^& J6 ]; \( O " B1 V4 {: F- l5 E# U8 W. v Additional information</B>The information has been provided by GSS IT.