Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

Bugtraq ID:	46054
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 28 2011 12:00AM
Updated:	Jan 28 2011 12:00AM
Credit:	ipax of DcLabs Security Group
Vulnerable:	Galileo Students Team Weborf 0.12.4 Galileo Students Team Weborf 0.12.3 Galileo Students Team Weborf 0.12.2 Galileo Students Team Weborf 0.12.1 Galileo Students Team Weborf 0.12
Not Vulnerable:	Galileo Students Team Weborf 0.12.5

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

Weborf is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users.

Versions prior to Weborf 0.12.5 are vulnerable.

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

An exploit isn't needed. Attackers can use readily available utilities to launch attacks.

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

References:

• Weborf 0.12.5 Release Notes (Galileo Student Team)
  
• Weborf Homepage (Galileo Student Team)