SWS Simple Web Server Stack Corruption Vulnerability

Bugtraq ID:	5660
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2002 12:00AM
Updated:	Sep 05 2002 12:00AM
Credit:	Credited to 3APA3A.
Vulnerable:	SWS SWS Simple Web Server 0.1 .1 SWS SWS Simple Web Server 0.1 .0 SWS SWS Simple Web Server 0.0.4 SWS SWS Simple Web Server 0.0.3
Not Vulnerable:

SWS Simple Web Server Stack Corruption Vulnerability

SWS Simple Web Server is prone to an error that may result in a denial of service. If a recv() call fails, a null word will overwrite the saved base pointer on the stack. This may cause a crash and access violation after the affected function returns. A denial of service may result.

SWS Simple Web Server Stack Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SWS Simple Web Server Stack Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SWS Simple Web Server Stack Corruption Vulnerability

References: