MacOS 9 Personal Web Sharing Remote DoS Vulnerability

Bugtraq ID:	2715
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2001 12:00AM
Updated:	May 10 2001 12:00AM
Credit:	Jass Seljamaa <[email protected]> posted this vulnerability to BugTraq on May 10th, 2001.
Vulnerable:	Apple Personal Web Sharing 1.5.5 Apple Personal Web Sharing 1.5 Apple Personal Web Sharing 1.1 + Apple Mac OS 8 8.1 + Apple Mac OS 8 8.1 + Apple Mac OS 8 8.0 + Apple Mac OS 8 8.0 + Apple Mac OS 9 9.0
Not Vulnerable:

MacOS 9 Personal Web Sharing Remote DoS Vulnerability

Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9.

A user may craft a URL which contains excess characters to cause the file-sharing system to shut down.

The file sharing system must then be restarted to regain its functionality once again.

MacOS 9 Personal Web Sharing Remote DoS Vulnerability

Jass Seljamaa <[email protected]> provided the exploit for this vulnerability in a posting to Bug Traq:

http://fileserver/?aaaaaaaaa... [approx. 6000 characters]

MacOS 9 Personal Web Sharing Remote DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MacOS 9 Personal Web Sharing Remote DoS Vulnerability

References: