bugtraq - dos_in_file_share

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <44674959.20040721004938@rambler.ru>
Date: Wed, 21 Jul 2004 00:49:38 +0400
From: nekd0 <nekd0@...bler.ru>
To: bugtraq@...urityfocus.com
Subject: dos_in_file_share_2.6

Hello bugtraq,

LionMax Software WWW File Share Pro Remote Denial of Service Vulnerability

remote  Yes     
local   No

vulnerable WWW File Share Pro 2.60
download http://www.wfshome.com/download/wfssetup.exe

WWW File Share Pro HTTP server may be prone to a remote denial of service
condition. Successful exploitation of this vulnerability may allow a remote
attacker to cause the vulnerable server to crash or hang, affectively 
denying service to legitimate users.

Server goes down if a remote attacker use that inquiry:

http://[victim]/AAA..[x50000]..AAA

There are no upgrade yet.

Founded by nekd0.

-- 
Best regards,
 nekd0                          mailto:nekd0@...bler.ru