Perception LiteServe Malformed GET Request Buffer Overflow Vulnerability

Bugtraq ID:	6192
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 18 2002 12:00AM
Updated:	Nov 18 2002 12:00AM
Credit:	Discovery of this vulnerability credited to "Matthew Murphy" <[email protected]>.
Vulnerable:	Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0
Not Vulnerable:

Perception LiteServe Malformed GET Request Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for Perception LiteServe HTTP server. The vulnerability occurs when the web server attempts to process malformed GET requests. Reportedly, when processing overly long GET requests consisting of illegal character sequences, the web server will crash.

An attacker can exploit this vulnerability by issuing a long malformed GET request consisting of illegal characters. This will cause the LiteServe HTTP server to crash.

Perception LiteServe Malformed GET Request Buffer Overflow Vulnerability

There is no exploit required.

Perception LiteServe Malformed GET Request Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Perception LiteServe Malformed GET Request Buffer Overflow Vulnerability

References: