NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".

A remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
. [: [2 J/ a' U! t% n
) ]8 U, W$ e: W& W Details</B><B>Vulnerable Systems:</B>
* NetworkActiv Web Server 1.0 prior to 28 September 2004
8 ~1 u& v8 K" N% k! l" t
. k+ ~  Q: K# N  u+ A<B>Immune Systems:</B>
' u4 a8 v( Q) R0 W" D5 G; ` * NetworkActiv Web Server 1.0 after 28 September 2004

5 q0 D  S: i1 a; S8 q& g" O! E; Z<B>Vendor response:</B>
$ g) p+ \& `4 ?& FThe vendor has issued a fix to prevent the vulnerability from happening.
) M2 U7 p. F  n1 W, e! t
Additional information</B>The information has been provided by GSS IT.