Working Resources BadBlue Webserver Denial Of Service Vulnerability

Bugtraq ID:	10983
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 20 2004 12:00AM
Updated:	Aug 20 2004 12:00AM
Credit:	James Bercegay of the GulfTech Security Research Team disclosed this vulnerability.
Vulnerable:	Working Resources Inc. BadBlue 2.50
Not Vulnerable:

Working Resources BadBlue Webserver Denial Of Service Vulnerability

Working Resources BadBlue Webserver is intended to share various resources and is developed for Microsoft Windows environments.

It is reported that BadBlue Webserver is susceptible to a denial of service vulnerability.

This vulnerability allows an attacker to deny service to legitimate users, by causing the web server to deny all incoming HTTP requests.

Version 2.5 of the BadBlue Webserver is reportedly affected by this vulnerability. Other versions may also be affected.

Working Resources BadBlue Webserver Denial Of Service Vulnerability

An exploit is not required, but a proof of concept script has been provided:

• /data/vulnerabilities/exploits/badblue_webserver_dos.pl

Working Resources BadBlue Webserver Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Working Resources BadBlue Webserver Denial Of Service Vulnerability

References:

• BadBlue Product Homepage (Working Resources Inc)
  
• BadBlue Webserver v2.5 Denial Of Service Vulnerability ("GulfTech Security" )