NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability

Bugtraq ID:	52208
Class:	Input Validation Error
CVE:	CVE-2012-1465
Remote:	Yes
Local:	No
Published:	Feb 29 2012 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	Prabhu S Angadi of SecPod Research
Vulnerable:	NetMechanica NetDecision 4.5.1
Not Vulnerable:	NetMechanica NetDecision 4.6.1

NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability

NetDecision HTTP Server is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

NetDecision HTTP 4.5.1 is affected; other versions may also be vulnerable.

NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/52208.py

NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability

References:

• NetDecision 4.6.1 Release Notes (Netmechanica)
  
• NetDecision Homepage (NetMechanica)
  
• Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability (SecPod)