Cyberstop Web Server Long Request DoS Vulnerability

Bugtraq ID:	3930
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0201
Remote:	Yes
Local:	No
Published:	Jan 22 2002 12:00AM
Updated:	Jul 11 2009 09:56AM
Credit:	Discovered and posted to Bugtraq by al3x hernandez <[email protected]>.
Vulnerable:	Cyberstop Web Server for Windows 0.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0
Not Vulnerable:

Cyberstop Web Server Long Request DoS Vulnerability

Cyberstop is a web server for Windows 9x/NT/2000 systems.

Attacks can be launched on a Cyberstop host if a request is submitted containing an unusual number of arbitrary characters. Cyberstop web server will stop responding, a restart of the application may be required in order to regain normal functionality.

Cyberstop Web Server Long Request DoS Vulnerability

Alex Hernandez <[email protected]> has provided an exploit:

• /data/vulnerabilities/exploits/Cyber_Dos.pl