Armida Databased Web Server Remote GET Request Denial Of Service Vulnerability

Bugtraq ID:	8017
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 23 2003 12:00AM
Updated:	Jun 23 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to "[email protected]" <[email protected]>.
Vulnerable:	Frassetto Software Armida Databased Web Server 1.0
Not Vulnerable:

Armida Databased Web Server Remote GET Request Denial Of Service Vulnerability

Armida Databased Web Server is reportedly prone to a remote denial of service when process malicious GET requests. The problem occurs when processing requests containing excessive data.

Exploitation of this vulnerability would result in the remote service crashing.
Although unconfirmed, due to the nature of this vulnerability it may be possible to supply and execute arbitrary code.

Armida Databased Web Server Remote GET Request Denial Of Service Vulnerability

The following proof of concept has been supplied:

• /data/vulnerabilities/exploits/armidaDOS.c

Armida Databased Web Server Remote GET Request Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Armida Databased Web Server Remote GET Request Denial Of Service Vulnerability

References:

• Armida Homepage (Frassetto Software)
  
• TA-2003-06 Denial of Service Attack against Armida Databased Web ("[email protected]" )