MDG Web Server 4D HTTP Command Buffer Overflow Vulnerability

Bugtraq ID:	7479
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 01 2003 12:00AM
Updated:	May 01 2003 12:00AM
Credit:	Discovery of this vulnerability credited to "tom ferris" <[email protected]>.
Vulnerable:	MDG Computer Services Web Server 4D 3.6
Not Vulnerable:

MDG Web Server 4D HTTP Command Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for MDG Web Server. The vulnerability exists when the web server attempts to process overly long HTTP requests. Specifically, when the web server processes a malformed HTTP request of excessive length, the web server will crash. This will result in a denial of service condition.

MDG Web Server 4D HTTP Command Buffer Overflow Vulnerability

Exploit code has been released.

• /data/vulnerabilities/exploits/ws360_exp.c

MDG Web Server 4D HTTP Command Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MDG Web Server 4D HTTP Command Buffer Overflow Vulnerability

References:

• MDG Homepage (MDG Computer Services)
  
• SP Research Labs Advisory x05 ("tom ferris" )