Advisory for Small HTTP Server

From: neme-dhcat_private
Date: Tue Apr 24 2001 - 06:15:33 PDT

  • Next message: FreeBSD Security Advisories: "FreeBSD Security Advisory FreeBSD-SA-01:38.sudo"

     [ Advisory for Small HTTP Server v2.03            ]
     [ Site: http://feokt.spb.ru                       ]
     [ by nemesystm of the DHC                         ]
     [ (http://dhcorp.cjb.net - neme-dhcat_private) ]
     [ ADV-0111                                        ]
    
    /-|=[explanation]=|-\
    Small HTTP Server is a webserver. It has a simple
    denial of service.
    
    /-|=[who is vulnerable]=|-\
    Anyone running Small HTTP Server v2.03 and
    presumably older versions on Windows 98/ME.
    
    /-|=[testing it]=|-\
    To test this vulnerability, try the following.
    www.server.com/aux
    It should crash the whole computer requiring a
    reboot.
    
    /-|=[fix]=|-\
    Not known at the moment: vendor did not respond.
    Free, encrypted, secure Web-based email at www.hushmail.com
    



    This archive was generated by hypermail 2b30 : Tue Apr 24 2001 - 15:44:36 PDT