Omnicron Technologies OmniHTTPd Pro POST DoS Vulnerability

Bugtraq ID:	2730
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 15 2001 12:00AM
Updated:	May 15 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by SNS Research <[email protected]> on May 15, 2001.
Vulnerable:	Omnicron OmniHTTPD 2.0.8 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Omnicron Technologies OmniHTTPd Pro POST DoS Vulnerability

OmniHTTPD is subject to a denial of service. Submitting a POST request of unusual length to the host will cause the server to crash. A restart is required in order to gain normal functionality.

Omnicron Technologies OmniHTTPd Pro POST DoS Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Omnicron Technologies OmniHTTPd Pro POST DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Omnicron Technologies OmniHTTPd Pro POST DoS Vulnerability

References:

• Omnicron Homepage (Omnicron Technologies Corporation)