Michael Lamont Savant Web Server Long Request DoS Vulnerability

Bugtraq ID:	3788
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0099
Remote:	Yes
Local:	No
Published:	Jan 05 2002 12:00AM
Updated:	Jul 11 2009 09:56AM
Credit:	Discovered and posted to Bugtraq by Tamer Sahin <[email protected]>.
Vulnerable:	Michael Lamont Savant WebServer 3.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Michael Lamont Savant Web Server Long Request DoS Vulnerability

Michael Lamont Savant web server is an open source web server designed for Microsoft Windows environments.

Attacks can be launched on a Savant host if a request is submitted containing an unusual number of arbitrary characters. Savant web server will stop responding, a restart of the application may be required in order to regain normal functionality.

Michael Lamont Savant Web Server Long Request DoS Vulnerability

No exploit code is required.

Michael Lamont Savant Web Server Long Request DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Michael Lamont Savant Web Server Long Request DoS Vulnerability

References:

• Savant Home Page (Michael Lamont)