https://www.exploit-db.com/exploits/19445
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200103-006

基于Windows95的MicrosoftFrontPageServerExtensions(PWS)3.0.2.926和可能的其他版本存在缓冲区溢出漏洞。远程借助超长URL导致服务拒绝。

source: http://www.securityfocus.com/bid/568/info


A 'GET' request for a URL longer than 166 characters will overflow a buffer and cause the web server to crash with the following or similar error message:

VHTTPD32 caused an invalid page fault in
module VHTTPD32.EXE at 0137:0040aaed.
Registers:
EAX=010d7740 CS=0137 EIP=0040aaed EFLGS=00010202
EBX=00000000 SS=013f ESP=010d53d0 EBP=010d0074
ECX=010d7740 DS=013f ESI=010d7740 FS=13c7
EDX=000000a8 ES=013f EDI=bff92ac1 GS=0000
Bytes at CS:EIP:
ff 75 10 56 68 94 01 00 00 eb 1c 68 00 24 40 00
Stack dump:
00000010 010d7740 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000
00000000 

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19445.zip

来源:XF
名称:frontpage-pws-dos
链接:http://xforce.iss.net/static/3117.php
来源:BID
名称:568
链接:http://www.securityfocus.com/bid/568
来源:BUGTRAQ
名称:19990807CrashFrontPageRemotely…
链接:http://archives.neohapsis.com/archives/bugtraq/1999-q3/0381.html