NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
: n& }0 g! `6 u" G; p; @- D
A remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
5 I0 m6 e& A, }9 I$ t7 ?' H) v
8 G5 D' @: Q  S5 I Details</B><B>Vulnerable Systems:</B>
* NetworkActiv Web Server 1.0 prior to 28 September 2004
0 I% }  K4 N" b9 l
* @' B0 ^" R9 V  I+ y$ Y* i: Q<B>Immune Systems:</B>
* NetworkActiv Web Server 1.0 after 28 September 2004

<B>Vendor response:</B>
* u1 G6 u" ?5 j. x/ VThe vendor has issued a fix to prevent the vulnerability from happening.
- n* i9 H. y( B+ ]
Additional information</B>The information has been provided by GSS IT.