WWW File Share Pro HTTP Server Remote Denial of Service Vulnerability

vendor:

WWW File Share Pro

by:

SecurityFocus

7.5

CVSS

HIGH

Remote Denial of Service

399

CWE

Product Name: WWW File Share Pro

Affected Version From: 2.46

Affected Version To: 2.6

Patch Exists: Yes

Related CWE: N/A

CPE: www_file_share_pro

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2002

WWW File Share Pro HTTP Server Remote Denial of Service Vulnerability

It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable server to crash or hang, affectively denying service to legitimate users. WWW File Share Pro versions 2.46 and prior may be prone to this issue. Update: This vulnerability was originally fixed in WWW File Share Pro version 2.48, however, a new report suggests that version 2.60 is vulnerable to a similar attack. This has not been confirmed at the moment but version 2.60 is being added as a vulnerable version.

Mitigation:

Upgrade to the latest version of WWW File Share Pro

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/9398/info

It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable server to crash or hang, affectively denying service to legitimate users.

WWW File Share Pro versions 2.46 and prior may be prone to this issue.

Update: This vulnerability was originally fixed in WWW File Share Pro version 2.48, however, a new report suggests that version 2.60 is vulnerable to a similar attack. This has not been confirmed at the moment but version 2.60 is being added as a vulnerable version.

http://www.example.com/AAA...[x3000]...AAA
http://www.example.com/AAA...[x5000]...AAA