PT-2000-1707 · Robtex · Robtex Viking Web Server

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0775

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RobTex Viking server versions earlier than 1.06-370

Description The issue allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers.

Recommendations For versions earlier than 1.06-370, update to version 1.06-370 or later to resolve the issue. As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation. Avoid using long HTTP requests or headers until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2000-0775

Affected Products

Robtex Viking Web Server

References · 6

• 🔥 http://securityfocus.com/bid/1614 · Exploit
• 🔥 https://exploit-db.com/exploits/20180 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0775 · Security Note
• http://robtex.com/viking/bugs.htm · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0775 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=399a01c01122%240d7f2310%240201a8c0%40aviram · Note