WebGUI HTTPProxy Denial Of Service Vulnerability

Bugtraq ID:	7331
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2003 12:00AM
Updated:	Apr 11 2003 12:00AM
Credit:	This vulnerability was disclosed by the vendor.
Vulnerable:	Plain Black Software WebGUI 5.2.3
Not Vulnerable:	Plain Black Software WebGUI 5.2.4

WebGUI HTTPProxy Denial Of Service Vulnerability

WebGUI has been reported prone to Denial of Service vulnerability when handling malicious HttpProxy requests.

It has been reported that an attacker may make a malicious proxy request using the WebGUI HttpProxy functionality to triger a persistant denial of service condition.

This vulnerability has been reported to affect WebGUI version 5.2.3 although unconfirmed previous versions may also be affected.

WebGUI HTTPProxy Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WebGUI HTTPProxy Denial Of Service Vulnerability

Solution:
The vendor has addressed this issue in the latest version of the product. Users are advised to upgrade to resolve this issue.


Plain Black Software WebGUI 5.2.3

• Plain Black Software WebGui-5.2.4
  http://files.plainblack.com/downloads/5.x.x/webgui-5.2.4.tar.gz

WebGUI HTTPProxy Denial Of Service Vulnerability

References:

• WebGUI ChangeLog (Plain Black Software)
  
• WebGUI Homepage (Plain Black Software)