PT-1999-1539 · Unknown · Counter.Exe
Publicado
1999-05-19
·
Atualizado
2016-10-18
·
CVE-1999-1030
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
counter.exe version 2.70
Description
The issue allows a remote attacker to cause a denial of service, resulting in the application hanging. This occurs when an HTTP request that ends in a newline character (%0A) is sent, leading to a malformed entry in the counter log. The malformed log entry then produces an access violation.
Recommendations
For counter.exe version 2.70, consider restricting access to the HTTP request endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using HTTP requests that end in a newline character (%0A) to prevent the denial of service.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Counter.Exe