AN HTTPD HTTP Request Buffer Overflow Vulnerability

Bugtraq ID:	6528
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 06 2003 12:00AM
Updated:	Jan 06 2003 12:00AM
Credit:	Discovery credited to D4rkGr3y <[email protected]>.
Vulnerable:	AN AN-HTTPd 1.41 e
Not Vulnerable:	AN AN-HTTPd 1.42 f

AN HTTPD HTTP Request Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for AN HTTPD. The vulnerability exists when AN HTTPD receives overly long HTTP requests. This will cause the server to crash.

Although unconfirmed, it may be possible to cause the vulnerable web server to execute malicious attacker-supplied code.

It should be noted that the vendor has not been able to confirm this vulnerability.

AN HTTPD HTTP Request Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AN HTTPD HTTP Request Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AN HTTPD HTTP Request Buffer Overflow Vulnerability

References:

• AN-HTTPD Home Page (AN-HTTPD)
  
• AN HTTPd v.1.41e: DoS, CSS, real patch attack (D4rkGr3y )