PT-2001-1504 · Moby · Moby Netsuite Web Server

Published 2001-04-04 · Updated 2008-09-05 · CVE-2001-0275

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Moby Netsuite Web Server version 1.02

Description The issue allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.

Recommendations For Moby Netsuite Web Server version 1.02, consider restricting the length of HTTP requests to prevent exploitation until a patch is available. As a temporary workaround, implement measures to limit the impact of denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0275

Affected Products

Moby Netsuite Web Server

References · 2

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0346.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0275 · Security Note