BRS WebWeaver Long Request Remote Denial of Service Vulnerability

Bugtraq ID:	7280
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 04 2003 12:00AM
Updated:	Apr 04 2003 12:00AM
Credit:	Discovery of this vulnerability credited to euronymous.
Vulnerable:	BRS WebWeaver 1.0 3 BRS WebWeaver 1.0 2 BRS WebWeaver 1.0 1
Not Vulnerable:

BRS WebWeaver Long Request Remote Denial of Service Vulnerability

A denial of service vulnerability has been discovered BRS WebWeaver. The problem occurs when a request is made for a URL containing excessive data. Exploitation of this vulnerability may allow an anonymous remote attacker to crash a vulnerable server and possibly cause a target system to consume all available memory.

BRS WebWeaver Long Request Remote Denial of Service Vulnerability

This issue can be exploited with a web browser or text-based network client such as telnet or netcat.

BRS WebWeaver Long Request Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

BRS WebWeaver Long Request Remote Denial of Service Vulnerability

References:

• BRS WebWeaver - HTTP & FTP Server (BRS)