Denial of Dervice (DoS) In Nombas ScriptEase Mini WebServer

Reported February 19, 2002, by Tamer Sahin.

VERSIONS AFFECTED

·         Nombas ScriptEase Mini WebServer for Windows NT and Windows 95

 

DESCRIPTION

A Denial of Dervice (DoS) condition exists in Nombas’ ScriptEase Mini WebServer. By sending a long request, such as http://host/AAAAAA...(Ax2000)...AAAAAA, an attacker can remotely crash the vulnerable server.

 

VENDOR RESPONSE

 

The vendor, Nombas, has been notified but hasn't issued a patch.

 

CREDIT
Discovered by Tamer Sahin of Security Office.

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish