BRS WebWeaver Long URL Request Logging Failure Weakness
BID:8690
Info
BRS WebWeaver Long URL Request Logging Failure Weakness
| Bugtraq ID: | 8690 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 24 2003 12:00AM |
| Updated: | Sep 24 2003 12:00AM |
| Credit: | Discovery credited to "euronymous". |
| Vulnerable: |
BRS WebWeaver 1.0 6 BRS WebWeaver 1.0 5 BRS WebWeaver 1.0 4 BRS WebWeaver 1.0 3 BRS WebWeaver 1.0 2 BRS WebWeaver 1.0 1 BRS WebWeaver 0.63 beta BRS WebWeaver 0.62 beta BRS WebWeaver 0.61 beta BRS WebWeaver 0.60 beta BRS WebWeaver 0.52 beta BRS WebWeaver 0.51 beta BRS WebWeaver 0.50 beta BRS WebWeaver 0.49 beta |
| Not Vulnerable: | |
Discussion
BRS WebWeaver Long URL Request Logging Failure Weakness
A problem has been reported in the logging of some types of requests to BRS WebWeaver. Because of this, an attacker may be able to launch an unrecorded denial of service against vulnerable hosts.
A problem has been reported in the logging of some types of requests to BRS WebWeaver. Because of this, an attacker may be able to launch an unrecorded denial of service against vulnerable hosts.
Exploit / POC
BRS WebWeaver Long URL Request Logging Failure Weakness
No exploit is required for this weakness.
No exploit is required for this weakness.
Solution / Fix
BRS WebWeaver Long URL Request Logging Failure Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
BRS WebWeaver Long URL Request Logging Failure Weakness
References:
References:
- BRS WebWeaver - HTTP & FTP Server (BRS)
- BRS WebWeaver: Anonymous Surfing ("euronymous"