Savant Web Server NULL Vulnerability
BID:897
Info
Savant Web Server NULL Vulnerability
| Bugtraq ID: | 897 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 28 1999 12:00AM |
| Updated: | Dec 28 1999 12:00AM |
| Credit: | Discovered and publicized by USSR Labs on December 28, 1999. |
| Vulnerable: |
Michael Lamont Savant WebServer 2.0 |
| Not Vulnerable: |
Michael Lamont Savant WebServer 2.1 |
Discussion
Savant Web Server NULL Vulnerability
The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in <savant_path>\Logs\general.txt .
The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in <savant_path>\Logs\general.txt .
Exploit / POC
Savant Web Server NULL Vulnerability
http ://target/%00/
http ://target/%00/
Solution / Fix
Savant Web Server NULL Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].