NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".

5 b4 V1 n! n/ c7 L/ D# OA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
: }0 O. ]: T6 |; P1 N
( V( G+ m2 @* V: J; N2 P Details</B><B>Vulnerable Systems:</B>
4 s; g# W9 a2 v3 @3 [' |' L! x * NetworkActiv Web Server 1.0 prior to 28 September 2004
9 q7 A5 `% r; ~
<B>Immune Systems:</B>
! D7 @: `: ^) u3 R' ], Y* x+ j2 J * NetworkActiv Web Server 1.0 after 28 September 2004
5 _$ S' Q# C( e/ F4 P* E/ M
" i! t3 D& |  s0 C- I<B>Vendor response:</B>
2 W* P6 \0 ?. t( |1 E# h! f6 qThe vendor has issued a fix to prevent the vulnerability from happening.
; E4 J' V3 s% J1 O$ ]
* N+ d! j& ]( n/ y Additional information</B>The information has been provided by GSS IT.