VisNetic ActiveDefense Multiple GET Request Denial of Service Vulnerability

Bugtraq ID:	7428
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 24 2003 12:00AM
Updated:	Apr 24 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to Positive Technologies.
Vulnerable:	Deerfield VisNetic ActiveDefense 1.3.1
Not Vulnerable:

VisNetic ActiveDefense Multiple GET Request Denial of Service Vulnerability

A denial of service vulnerability has been discovered in VisNetic ActiveDefense. The problem occurs when multiple HTTP requests are subsequently made to a server, containing a specific amount of data. After processing these requests, the affected system will crash.

The system must be restarted to restore regularly functionality.

VisNetic ActiveDefense Multiple GET Request Denial of Service Vulnerability

The following proof of concept has been provided:

Transmit 90 packets to the target server, each containing the following data:

GET /xxx...[100]..xxx.htm HTTP/1.0,

VisNetic ActiveDefense Multiple GET Request Denial of Service Vulnerability

Solution:
Patch available:


Deerfield VisNetic ActiveDefense 1.3.1

• Deerfield vad_131_patch.exe
  http://www.deerfield.com/download/visnetic_activedefense/thanks.htm?dl id=53&profileid=24&productid=126&url=ftp://ftp.deerfield.com/pub/curre nt/vad_131_patch.exe&bp=0

VisNetic ActiveDefense Multiple GET Request Denial of Service Vulnerability

References:

• VisNetic ActiveDefense Product Page (Deerfield)
  
• Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense (Dmitry Maksimov )