[NT] ScriptEase MiniWeb Server DoS
From: support@securiteam.comDate: 02/24/02
- Previous message: support@securiteam.com: "[EXPL] Alcatel 4400 PBX Hack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Date: Sun, 24 Feb 2002 00:48:47 +0100 (CET)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -
ScriptEase MiniWeb Server DoS
------------------------------------------------------------------------
SUMMARY
The ScriptEase MiniWeb Server was written entirely in ScriptEase, and is
being distributed free by <http://www.nombas.com/> Nombas. This server is
not intended to compete with commercial web servers, rather it is meant to
allow you to easily setup a personal web site and for testing page design
and CGI scripts. A security vulnerability in the program allows remote
attackers to cause a DoS against the program.
DETAILS
Vulnerable systems:
ScriptEase MiniWeb Server version 0.95
ScriptEase MiniWeb Server is subject to a denial of service. Submitting a
request of unusual length to the host will cause the server to crash. A
restart is required in order to gain normal functionality.
http://host/AAAAAA...(Ax2000)...AAAAAA
ADDITIONAL INFORMATION
The information has been provided by <mailto:ts@SECURITYOFFICE.NET> Tamer
Sahin.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[EXPL] Alcatel 4400 PBX Hack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
