[32256] in bugtraq
DoS in Plug and Play Web Server Proxy Server
daemon@ATHENA.MIT.EDU (Oliver Karow)
Fri Oct 31 15:52:11 2003
Date: Fri, 31 Oct 2003 20:56:15 +0100 (MET)
From: "Oliver Karow" <Oliver.Karow@gmx.de>
To: bugtraq@securityfocus.com
MIME-Version: 1.0
Message-ID: <956.1067630175@www4.gmx.net>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
DoS in Plug and Play Web Server Proxy Server
==============================
Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY
server, running on Windows platforms.
Version: 1.0002c
--------
Vendor: www.pandpsoft.com
-------
Vulnerability:
--------------
Sending the following request "GET /asdf.? HTTP/1.0" to TCP Port 8080 will
stop the Proxy Service, showing a "Runtime Error 12001 - Parameter 1 of the
method used is invalid or not appropriate" on the console.
The Proxy Service has to be restarted.
Misc:
------
There are still several other (older) vulns in Plug & Play Webserver. It
seems
that the vendor does not update the software anymore.
Credit:
-------
Oliver.karow[AT]gmx.de
www.oliverkarow.de/research.htm
--
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService
Jetzt kostenlos anmelden unter http://www.gmx.net
+++ GMX - die erste Adresse für Mail, Message, More! +++
