PT-1999-1539 · Unknown · Counter.Exe

Published 1999-05-19 · Updated 2016-10-18 · CVE-1999-1030

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions counter.exe version 2.70

Description The issue allows a remote attacker to cause a denial of service, resulting in the application hanging. This occurs when an HTTP request that ends in a newline character (%0A) is sent, leading to a malformed entry in the counter log. The malformed log entry then produces an access violation.

Recommendations For counter.exe version 2.70, consider restricting access to the HTTP request endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using HTTP requests that end in a newline character (%0A) to prevent the denial of service.

Exploit

Fix

Related Identifiers

CVE-1999-1030

Affected Products

Counter.Exe

References · 5

• 🔥 http://securityfocus.com/bid/267 · Exploit
• 🔥 https://exploit-db.com/exploits/19212 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1030 · Security Note
• http://marc.info/?l=bugtraq&m=92713790426690&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=92707671717292&w=2 · Note