KarjaSoft Sami HTTP Server Request Remote Denial of Service Vulnerabilities

Bugtraq ID:	23445
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 12 2007 12:00AM
Updated:	Apr 01 2009 04:16PM
Credit:	shinnai is credited with the discovery of these vulnerabilities.
Vulnerable:	KarjaSoft Sami HTTP Server 2.0.1
Not Vulnerable:

KarjaSoft Sami HTTP Server Request Remote Denial of Service Vulnerabilities

Sami HTTP Server is prone to multiple remote denial-of-service vulnerabilities because the software fails to handle exceptional conditions.

Exploiting these issues allows remote attackers to crash the server application, denying further service to legitimate users.

This issue affects Sami HTTP Server 2.0.1; other versions may also be affected.

KarjaSoft Sami HTTP Server Request Remote Denial of Service Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/23445.py
• /data/vulnerabilities/exploits/23445.pl

KarjaSoft Sami HTTP Server Request Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any solutions for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

KarjaSoft Sami HTTP Server Request Remote Denial of Service Vulnerabilities

References:

• Sami HTTP server Homepage (KarjaSoft)