PT-2001-2382 · Vwebserver · Vwebserver

Publicado 2001-06-29 · Atualizado 2008-09-10 · CVE-2001-1250

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions vWebServer version 1.2.0

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging, by sending a small number of long URL requests. This could be due to a buffer overflow.

Recommendations For vWebServer version 1.2.0, consider restricting the length of URL requests to prevent the denial of service. Additionally, monitor system resources to quickly identify and respond to potential hang incidents. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1250

Produtos afetados

Vwebserver

Referências · 4

• http://iss.net/security_center/static/6771.php · Aviso do Fabricante
• http://securityfocus.com/bid/2979 · Nota
• http://online.securityfocus.com/archive/1/194418 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1250 · Nota de Segurança