NetworkActiv Web Server DoS

韩冰

Summary</B>NetworkActiv Web Server is a "simple and easy to use web server (HTTP server)".
- m: a) t" G9 J' a
; R2 ]4 {: x( V6 R8 rA remote user can supply an HTTP GET request with the %25 [%] string to server, causing it to consume all available CPU resources.

Details</B><B>Vulnerable Systems:</B>
6 r+ s1 _1 t/ z) [. ` * NetworkActiv Web Server 1.0 prior to 28 September 2004

1 }& `! }; F4 r8 v( {( Q<B>Immune Systems:</B>
1 t8 C, j5 g9 E% a- Z% Q" [ * NetworkActiv Web Server 1.0 after 28 September 2004

- k) Y4 b$ W; @! Q: v. i<B>Vendor response:</B>
, \2 T2 K! c9 e5 t/ {$ W  E$ z% YThe vendor has issued a fix to prevent the vulnerability from happening.
6 W* J: T! Y6 [  S- Q! G1 t3 G
7 |  X6 x2 D- c2 Y Additional information</B>The information has been provided by GSS IT.