标题: NetworkActiv Web Server DoS [打印本页] 作者: 韩冰 时间: 2004-10-6 09:52 标题: NetworkActiv Web Server DoS Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)". % e( x% D" Y6 Q7 K z & i( U E. V) S7 F! bA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.8 m7 |: P H) f R- ~
- j Y! o( L: L# o: L
Details</B><B>Vulnerable Systems:</B>5 b2 v1 B( E. n* [- b. x: W
* NetworkActiv Web Server 1.0 prior to 28 September 2004 " `2 N q+ L) X$ ~- W, e; d- I 9 L- _9 g8 S4 X* W3 v<B>Immune Systems:</B>! f9 Y; P. O; ~! S7 F7 z
* NetworkActiv Web Server 1.0 after 28 September 2004 0 t( s* P6 W1 f4 \* G* h6 @4 i3 S8 N! Y# J; Y: ?: N5 p
<B>Vendor response:</B>7 D6 _: H% w, q/ Q7 b6 ]
The vendor has issued a fix to prevent the vulnerability from happening.& a3 E% I4 R& l( K1 ?
0 j" E9 L8 u4 [$ Y/ U
Additional information</B>The information has been provided by GSS IT.