OSVDB ID: 1817

Title: Jana Web Server MS-DOS Device Name DoS

Info

Disclosure

May 07, 2001

Discovery

Unknown

Dates

Exploit

May 07, 2001

Solution

Unknown

Description

Jana Webserver contains a flaw that may allow a remote denial of service. The issue is triggered when a remote attacker requests a URI with a MS-DOS device name in it, and will result in loss of availability for the service.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 2.0 Beta 2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Jana

WebServer

1.45
1.46
2.0b

References

Credit

  • nemesystm - neme-dhcBrand New Doo Doohushmail.com -


Direct URL: http://osvdb.org/36218