Netscape Enterprise Server 和 FastTrask Server缓冲区溢出漏洞-安全小百科

Netscape Enterprise Server 和 FastTrask Server缓冲区溢出漏洞

漏洞ID	1105522	漏洞类型	缓冲区溢出
发布时间	1999-08-25	更新时间	2005-05-02
CVE编号	CVE-1999-0744	CNNVD-ID	CNNVD-200001-016
漏洞平台	Windows	CVSS评分	7.5

|漏洞来源

https://www.exploit-db.com/exploits/19783
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200001-016

|漏洞详情

NetscapeEnterpriseServer和FastTraskServer存在缓冲区溢出漏洞。远程攻击者可以超长HTTPGET请求提升特权。

|漏洞EXP

source: http://www.securityfocus.com/bid/1024/info

A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be executed remotely at this point. 

Netscape Enterprise Server 3.5 running on either Netware or Solaris is not known to be susceptible to this issue.

GET /(4080 character string) HTTP/1.0

|参考资料

来源:BID
名称:603
链接:http://www.securityfocus.com/bid/603

相关推荐: Multiple Linux Vendor IP Options Vulnerability

Multiple Linux Vendor IP Options Vulnerability 漏洞ID 1104737 漏洞类型 Unknown 发布时间 1999-06-01 更新时间 1999-06-01 CVE编号 N/A CNNVD-ID N/A 漏洞…

文章版权归作者所有，未经允许请勿转载。

THE END