Httprint HTTP Response Handling Multiple Vulnerabilities

Bugtraq ID:	16031
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2005 12:00AM
Updated:	Dec 22 2005 12:00AM
Credit:	Discovered by Mariano Nunez Di Croce <[email protected]>.
Vulnerable:	httprint httprint 202.0
Not Vulnerable:	httprint httprint 301.0

Httprint HTTP Response Handling Multiple Vulnerabilities

httprint is prone to multiple remote vulnerabilities.

The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser.

The second issue may allow remote attackers to crash an instance of the application.

httprint version 202 is vulnerable to these issues.

Httprint HTTP Response Handling Multiple Vulnerabilities

An exploit is not required.

The following proof of concept examples are available:

SecServerSignature "Microsoft-IIS/5.0<script>alert('test')</script>"

SecServerSignature "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..."x1500

Httprint HTTP Response Handling Multiple Vulnerabilities

Solution:
The vendor has released httprint 301 to address these issues.


httprint httprint 202.0

• httprint httprint 301
  http://net-square.com/httprint/#downloads

Httprint HTTP Response Handling Multiple Vulnerabilities

References:

• httprint Home Page (httprint)
  
• CYBSEC - Security Advisory: httprint Multiple Vulnerabilities (=?ISO-8859-1?Q?Mariano_Nu=F1ez_Di_Croce?= )