Hasbani Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability

Bugtraq ID:	15225
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 27 2005 12:00AM
Updated:	Oct 27 2005 12:00AM
Credit:	Discovery is credited to Expanders <[email protected]>.
Vulnerable:	Hasbani Web Server Hasbani Web Server 2.0
Not Vulnerable:

Hasbani Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability

Hasbani Web Server is affected by a remote denial of service vulnerability.

This issue arises when the server handles malformed HTTP GET requests.

A successful attack can allow an attacker to terminate the server and deny service to legitimate users.

Hasbani Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/Hasbani_dos.c

Hasbani Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hasbani Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability

References:

• Hasbani/Windweb 2.0 Remote DoS (Expanders )