Info

Disclosure

May 02, 2005

Discovery

Unknown

Dates

Exploit

May 02, 2005

Solution

Unknown

Description

AN HTTPD Server contains a flaw that may allow a remote denial of service. The issue is triggered when a malformed dir parameter is passed to input2.bat, and will result in loss of availability for the service.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Available
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Nakata

AN HTTPD Server

1.42n

References

Related OSVDB ID: 16496 16498
Other Advisory URL: http://osvdb.org/ref/16/1649x-an_httpd.txt
Vendor URL: http://www.st.rim.or.jp/~nakata/

Credit

Dr_insane - dr_insanepathfinder.gr - Personal Page

Direct URL: http://osvdb.org/36218