T. Hauck Jana Server HTTP Server Request Logging Buffer Overflow Vulnerability

Bugtraq ID:	5319
Class:	Boundary Condition Error
CVE:	CVE-2002-1061
Remote:	Yes
Local:	No
Published:	Jul 26 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovered by 3APA3A <[email protected]>.
Vulnerable:	T. Hauck Jana Webserver 2.2.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 Beta2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 Beta1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.46 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.45 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

T. Hauck Jana Server HTTP Server Request Logging Buffer Overflow Vulnerability

Jana Server is a server for Microsoft Windows based systems. In addition to performing a wide range of proxy server functions, it supports an HTTP server.

A buffer overflow vulnerability has been reported in the HTTP server. If an extremely long HTTP request is received, the server will crash when attempting to log the request. This has been reported to be the result of a buffer overflow condition.

T. Hauck Jana Server HTTP Server Request Logging Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

T. Hauck Jana Server HTTP Server Request Logging Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

T. Hauck Jana Server HTTP Server Request Logging Buffer Overflow Vulnerability

References:

• Jana Webserver (Thomas Hauck)