Seminole Webserver Empty Request Denial of Service Vulnerability

Bugtraq ID:	4727
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 11 2002 12:00AM
Updated:	May 11 2002 12:00AM
Credit:	Discussed in the Freshmeat News summary, May 10 2002.
Vulnerable:	Mark Grosberg Seminole Webserver 2.10
Not Vulnerable:	Mark Grosberg Seminole Webserver 2.12

Seminole Webserver Empty Request Denial of Service Vulnerability

Seminole Webserver 2.12 is a small web server designed specifically for embedded systems. When it receives an empty request, it enters an infinite loop and becomes unresponsive.

Seminole Webserver Empty Request Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Seminole Webserver Empty Request Denial of Service Vulnerability

Solution:
This is fixed in version 2.12.


Mark Grosberg Seminole Webserver 2.10

• Mark Grosberg seminole-2.12.tar.gz
  http://freshmeat.net/redir/seminole/19624/url_tgz/seminole-2.12.tar.gz

Seminole Webserver Empty Request Denial of Service Vulnerability

References:

• The Seminole Webserver (Mark Grosberg)