XSS in Null HTTPd

From: Matthew Murphy (mattmurphy@kc.rr.com)
Date: 09/02/02 

From: "Matthew Murphy" <mattmurphy@kc.rr.com>
To: "VulnDiscuss" <vulndiscuss@vulnwatch.org>, "VulnWatch" <vulnwatch@vulnwatch.org>, "Vuln-Dev" <vuln-dev@securityfocus.com>, "SecurITeam News" <news@securiteam.com>, "BugTraq" <bugtraq@securityfocus.com>
Date: Mon, 2 Sep 2002 11:57:11 -0500

Null HTTPd is a simple HTTP server that runs on Win32/Unix systems. It is
quite basic, but offers good CGI support. A vulnerability in Null HTTPd may
allow cross-site scripting via a 404 page:

http://localhost/a?x=>alert(document.URL)</SCRIPT>

You have to place this in the query string so that it doesn't get the
typical "%xx..." urlencode treatment from the browser. If the code is
encoded in any way, it prevents the vulnerability from working.

"The reason the mainstream is thought
of as a stream is because it is
so shallow."
                     - Author Unknown

Relevant Pages

  • [Full-Disclosure] XSS in Null HTTPd
    ... Null HTTPd is a simple HTTP server that runs on Win32/Unix systems. ... but offers good CGI support. ... A vulnerability in Null HTTPd may ...
    (Full-Disclosure)
  • AN HTTPd Sample Script File Truncation
    ... AN HTTPd is a relatively small, powerful web server designed for Windows ... Vulnerability Description ... Attackers can overwrite any file that the CGI user can access (this userid ...
    (Bugtraq)
  • [VulnWatch] AN HTTPd Sample Script File Truncation
    ... AN HTTPd is a relatively small, powerful web server designed for Windows ... Vulnerability Description ... Attackers can overwrite any file that the CGI user can access (this userid ...
    (VulnWatch)
  • [Full-Disclosure] AN HTTPd Sample Script File Truncation
    ... AN HTTPd is a relatively small, powerful web server designed for Windows ... Vulnerability Description ... Attackers can overwrite any file that the CGI user can access (this userid ...
    (Full-Disclosure)
  • [VulnWatch] AN HTTPd Sample Script File Truncation
    ... AN HTTPd is a relatively small, powerful web server designed for Windows ... Vulnerability Description ... Attackers can overwrite any file that the CGI user can access (this userid ...
    (Full-Disclosure)