GameCheats Advanced Web Server Malformed HTTP Request Denial Of Service Vulnerability

Bugtraq ID:	5080
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2002 12:00AM
Updated:	Jun 21 2002 12:00AM
Credit:	Discovery credited to "elaborate ruse" <[email protected]>.
Vulnerable:	GameCheats Advanced Web Server Professional 1.0.3 0000
Not Vulnerable:

GameCheats Advanced Web Server Malformed HTTP Request Denial Of Service Vulnerability

Advanced Web Server Professional is a web server developed by GameCheats. It is freely available for use on the Microsoft Windows operating environment.

Reportedly, the web server is prone to a denial of service condition when servicing malformed requests. The vulnerability occurs when various invalid HTTP requests are made to the web server.

A remote attacker needs to make approximately 100 invalid HTTP requests to the web server. This will exhaust all available threads for Tomcat leading to the denial of service condition.

GameCheats Advanced Web Server Malformed HTTP Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

GameCheats Advanced Web Server Malformed HTTP Request Denial Of Service Vulnerability

References:

• Product Page (GameCheats)