ECWare/ECMerchant CGI Denial Of Service Vulnerability
BID:6066
Info
ECWare/ECMerchant CGI Denial Of Service Vulnerability
| Bugtraq ID: | 6066 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2002 12:00AM |
| Updated: | Mar 27 2002 12:00AM |
| Credit: | The original discoverer of this vulnerability is unknown. The issue appears to have been reported by ISS X-Force. |
| Vulnerable: |
ECware ECware Pro 5.0 ECware ECware Pro 4.0 ECware ECmerchant 2000 Pro 5.0 |
| Not Vulnerable: |
ECware ECware Pro 5.1 ECware ECmerchant 2000 Pro 5.1 |
Discussion
ECWare/ECMerchant CGI Denial Of Service Vulnerability
ECware and ECmerchant are prone to a vulnerability which may be exploited to create a denial of service condition.
This issue is reportedly in the ECware.exe CGI program. Multiple HTTP requests may cause the program to stop responding, which may also cause instability in the underlying IIS webserver and operating system.
ECware and ECmerchant are prone to a vulnerability which may be exploited to create a denial of service condition.
This issue is reportedly in the ECware.exe CGI program. Multiple HTTP requests may cause the program to stop responding, which may also cause instability in the underlying IIS webserver and operating system.
Exploit / POC
ECWare/ECMerchant CGI Denial Of Service Vulnerability
There is no exploit code required.
There is no exploit code required.
References
ECWare/ECMerchant CGI Denial Of Service Vulnerability
References:
References:
- ECware Homepage (ECware)
- ECWare IIS CGI program denial of service (ISS)