NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
: h' ~$ `" ~  i  J
0 G2 W7 I, u4 F; D- w  ^. c+ zA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
& B9 v0 K: }; \- m- d  S$ J1 w! H
Details</B><B>Vulnerable Systems:</B>
* NetworkActiv Web Server 1.0 prior to 28 September 2004
1 }* `' b4 Z# G4 S, _9 b
& Q/ u2 x4 B+ ~" W+ L6 }<B>Immune Systems:</B>
% y; J1 B0 @4 v# D3 A! ` * NetworkActiv Web Server 1.0 after 28 September 2004

/ K/ N, j3 g, D$ q. }5 L3 t' ^<B>Vendor response:</B>
The vendor has issued a fix to prevent the vulnerability from happening.
0 [% m  A$ f2 @" w3 y9 }- p5 p
Additional information</B>The information has been provided by GSS IT.