Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
BID:7954
Info
Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
| Bugtraq ID: | 7954 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2003 12:00AM |
| Updated: | Jun 17 2003 12:00AM |
| Credit: | Discovery credited to dr_insane. |
| Vulnerable: |
Proxomitron Proxomitron |
| Not Vulnerable: | |
Discussion
Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
It has been reported that Proxomitron does not properly handle some string types. Because of this, an attacker can cause the server to become unstable and crash.
It has been reported that Proxomitron does not properly handle some string types. Because of this, an attacker can cause the server to become unstable and crash.
Exploit / POC
Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
No exploit is required for this vulnerability. The following proofs-of-concept have been made available:
GET /../..0%%../ * (4504 chars)
GET \..\..\..\ * (4504 chars)
No exploit is required for this vulnerability. The following proofs-of-concept have been made available:
GET /../..0%%../ * (4504 chars)
GET \..\..\..\ * (4504 chars)
Solution / Fix
Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Proxomitron Proxy Server Long Get Request Remote Denial Of Service Vulnerability
References:
References:
- Homepage (Proxomitron)