T. Hauck Jana Webserver服务拒绝漏洞-安全小百科

T. Hauck Jana Webserver服务拒绝漏洞

漏洞ID	1106335	漏洞类型	未知
发布时间	2001-05-07	更新时间	2005-05-02
CVE编号	CVE-2001-0558	CNNVD-ID	CNNVD-200108-081
漏洞平台	Windows	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/20830
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200108-081

|漏洞详情

T.HauckJanaWebserver2.01beta1版本及之前版本存在漏洞。远程攻击者可以借助含MS-DOS设备名(即：GET/auxHTTP/1.0)的URL请求创建服务拒绝。

|漏洞EXP

source: http://www.securityfocus.com/bid/2704/info

Versions of Jana Server are vulnerable to a denial of service attack.

It is possible to remotely crash a system running Jana Server by submitting a URL request which specifies an MS-DOS devicename.

A hard reboot of the exploited server will be required to restore web services. 

www.example.com/aux

|参考资料

来源:XF
名称:jana-server-device-dos(6521)
链接:http://xforce.iss.net/static/6521.php
来源:BUGTRAQ
名称:20010507AdvisoryforJanaserver
链接:http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html
来源:BID
名称:2704
链接:http://www.securityfocus.com/bid/2704
来源:OSVDB
名称:1817
链接:http://www.osvdb.org/1817

相关推荐: SCO OpenServer lpforms缓冲区溢出漏洞

SCO OpenServer lpforms缓冲区溢出漏洞漏洞ID 1106267 漏洞类型缓冲区溢出发布时间 2001-03-27 更新时间 2001-08-22 CVE编号 CVE-2001-0578 CNNVD-ID CNNVD-200108-12…

文章版权归作者所有，未经允许请勿转载。

THE END