NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
$ d# E# U" @) g; t. @7 T% R
4 N+ _( K, x/ j2 W1 H7 c+ q1 p0 AA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.

Details</B><B>Vulnerable Systems:</B>
* NetworkActiv Web Server 1.0 prior to 28 September 2004

<B>Immune Systems:</B>
$ x6 L$ a  U, R) o" F * NetworkActiv Web Server 1.0 after 28 September 2004
( R# t. W3 \  ^0 V/ r% x
; X0 [) z5 g5 N5 K. M<B>Vendor response:</B>
The vendor has issued a fix to prevent the vulnerability from happening.
8 W  }6 D$ d+ x& v! ^, P" n5 Q4 u
Additional information</B>The information has been provided by GSS IT.