SurfControl SuperScout Email Filter Incomplete HTTP Request DoS Vulnerability

Bugtraq ID:	5931
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-1532
Remote:	Yes
Local:	No
Published:	Oct 09 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery of this issue is credited to "'ken'@FTU" <[email protected]>.
Vulnerable:	SurfControl SuperScout Email Filter for SMTP 4.0 SurfControl SuperScout Email Filter 3.5.1 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows NT 4.0 SP6a SurfControl SuperScout Email Filter 3.5
Not Vulnerable:

SurfControl SuperScout Email Filter Incomplete HTTP Request DoS Vulnerability

SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.

The administrative web interface is prone to a denial of service when handling an incomplete HTTP GET request. If a request is made that does not contain terminating bytes (\r\n\r\n), the administrative server will hang and will not be able to serve other requests.

SurfControl SuperScout Email Filter Incomplete HTTP Request DoS Vulnerability

There is no exploit code required.

SurfControl SuperScout Email Filter Incomplete HTTP Request DoS Vulnerability

Solution:
The vendor has reportedly released a fix. Affected users should contact the vendor about obtaining fixes.

SurfControl SuperScout Email Filter Incomplete HTTP Request DoS Vulnerability

References:

• SurfControl Home Page (SurfControl)