NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
3 B$ j3 s7 v" z# s0 ]3 Y, {) j
$ W4 W0 l; v" z2 X; L5 XA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.
' n: j6 O4 d. A* N/ Q! L$ e: C
4 N* g# T' W$ s' U# Y0 C% @ Details</B><B>Vulnerable Systems:</B>
6 d' H! X! m, S2 ^ * NetworkActiv Web Server 1.0 prior to 28 September 2004

3 {6 D! U) Q6 b: c<B>Immune Systems:</B>
5 i9 C1 \0 [7 y5 j/ z5 t * NetworkActiv Web Server 1.0 after 28 September 2004

9 d( g* S3 O  r8 B; S/ e- k<B>Vendor response:</B>
! u: [( z( S: ^3 {The vendor has issued a fix to prevent the vulnerability from happening.

' e& B  r5 I2 { Additional information</B>The information has been provided by GSS IT.