NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
# \( O, v1 q" J/ ^
A remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
% G5 n1 |' a, N) p2 c8 O1 D% V% G# }
7 Y5 k+ f& J% O8 W% h1 q Details</B><B>Vulnerable Systems:</B>
& m. |! `$ Y& X! n4 s9 F# _ * NetworkActiv Web Server 1.0 prior to 28 September 2004
  }+ X  N! i. s( `, _; ?/ a# ?
, ^. `) w: g" `: l<B>Immune Systems:</B>
* NetworkActiv Web Server 1.0 after 28 September 2004
) W+ n  J7 c! s4 G% M  N& R7 m1 D
<B>Vendor response:</B>
The vendor has issued a fix to prevent the vulnerability from happening.

" R% B# l& j& \! }  w! i3 {1 G Additional information</B>The information has been provided by GSS IT.