From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu May 29 2003 - 06:33:02 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
BRS WebWeaver POST and HEAD Buffer Overflow Vulnerabilities

READ ONLINE:
http://www.secunia.com/advisories/8880/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
From remote

SOFTWARE:
BRS WebWeaver 1.x

DESCRIPTION:
Two vulnerabilities have been identified in BRS WebWeaver, which can
be exploited to cause a DoS (Denial of Service) on a vulnerable
webserver.

The vulnerabilities are caused due to boundary errors when processing
long POST and HEAD requests. A malicious person can exploit this by
sending a 32700 bytes long request, which will crash the web
service.

The vulnerabilities have been reported in version 1.04. However,
prior versions may also be affected.

SOLUTION:
Filter long requests in a HTTP proxy or firewall with filtering
capabilities.

REPORTED BY / CREDITS:
euronymous

ORIGINAL ADVISORY:
English:
http://f0kp.iplus.ru/bz/025.en.txt

Russian:
http://f0kp.iplus.ru/bz/025.ru.txt

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]