bugtraq - DoS in Plug and Play Web Server Proxy Server

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 31 Oct 2003 20:56:15 +0100 (MET)
From: "Oliver Karow" <Oliver.Karow@....de>
To: bugtraq@...urityfocus.com
Subject: DoS in Plug and Play Web Server Proxy Server


DoS in Plug and Play Web Server Proxy Server
==============================

Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY
server, running on Windows platforms.


Version: 1.0002c 
--------

Vendor: www.pandpsoft.com
-------

Vulnerability: 
--------------
Sending the following request "GET /asdf.? HTTP/1.0" to TCP Port 8080 will 
stop the Proxy Service, showing a "Runtime Error 12001 - Parameter 1 of the
method used is invalid or not appropriate" on the console.

The Proxy Service has to be restarted.

Misc:
------

There are still several other (older) vulns in Plug & Play Webserver. It
seems
that the vendor does not update the software anymore.

Credit:
-------

Oliver.karow[AT]gmx.de
www.oliverkarow.de/research.htm

-- 
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService

Jetzt kostenlos anmelden unter http://www.gmx.net

+++ GMX - die erste Adresse für Mail, Message, More! +++