NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
9 J. P0 j6 Q+ s: j. x
A remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
, ?/ z: X' O5 J4 B% W% k4 V
- \9 P" [5 Q8 a, N0 f* a- }: D Details</B><B>Vulnerable Systems:</B>
+ \6 W9 K* t3 u% \% C * NetworkActiv Web Server 1.0 prior to 28 September 2004
9 L, o9 z4 S/ w. A6 u
. ^' H1 F: l7 a7 U<B>Immune Systems:</B>
  ]% W0 i+ Q0 I% U* s' ]" s * NetworkActiv Web Server 1.0 after 28 September 2004

8 b1 Y7 Q- _1 I4 I# |- L1 a<B>Vendor response:</B>
% |2 z; ?7 h; }8 nThe vendor has issued a fix to prevent the vulnerability from happening.

Additional information</B>The information has been provided by GSS IT.