PT-2001-2382 · Vwebserver · Vwebserver

Published 2001-06-29 · Updated 2008-09-10 · CVE-2001-1250

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions vWebServer version 1.2.0

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging, by sending a small number of long URL requests. This could be due to a buffer overflow.

Recommendations For vWebServer version 1.2.0, consider restricting the length of URL requests to prevent the denial of service. Additionally, monitor system resources to quickly identify and respond to potential hang incidents. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1250

Affected Products

Vwebserver

References · 4

• http://iss.net/security_center/static/6771.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1250 · Security Note
• http://securityfocus.com/bid/2979 · Note
• http://online.securityfocus.com/archive/1/194418 · Note