NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".

: }% [3 p, t9 E+ yA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.

Details</B><B>Vulnerable Systems:</B>
* v. @  J$ A8 i0 L% m$ | * NetworkActiv Web Server 1.0 prior to 28 September 2004

6 J, {$ u4 J1 v9 D' L3 t<B>Immune Systems:</B>
# J/ U5 o: X7 [* }. ? * NetworkActiv Web Server 1.0 after 28 September 2004
1 P$ T9 {, ]! z& C, o
<B>Vendor response:</B>
" j7 d2 y  [3 l1 j: i" w( z5 oThe vendor has issued a fix to prevent the vulnerability from happening.
& S" F1 `, R: G' P
& f* ]; r7 i" Z Additional information</B>The information has been provided by GSS IT.