Novell GroupWise Web Access Enhancement Pack中Java服务器拒绝服务漏洞

漏洞ID	1105705	漏洞类型	未知
发布时间	2000-02-07	更新时间	2005-05-02
CVE编号	CVE-2000-0146	CNNVD-ID	CNNVD-200002-035
漏洞平台	Novell	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/19744
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200002-035

|漏洞详情

NovellGroupWiseWebAccessEnhancementPack中Java服务器存在漏洞。远程攻击者借助超长服务程序URL可以导致拒绝服务。

|漏洞EXP

source: http://www.securityfocus.com/bid/972/info

By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up all available CPU resource, or to stop the post office service. The server will need to be rebooted to restore normal operation.


http ://target/servlet/long string of 200+ characters

|参考资料

来源:BID
名称:972
链接:http://www.securityfocus.com/bid/972
来源:BUGTRAQ
名称:20000207NovellGroupWise5.5EnhancementPackWebAccessDenialofService
链接:http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html

相关推荐: Mandrake Linux漏洞

Mandrake Linux漏洞漏洞ID 1205079 漏洞类型未知发布时间 2001-11-30 更新时间 2001-11-30 CVE编号 CVE-2001-0912 CNNVD-ID CNNVD-200111-058 漏洞平台 N/A CVSS评…