header-logo
Suggest Exploit
vendor:
SurfNOW
by:
SecurityFocus
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: SurfNOW
Affected Version From: 1
Affected Version To: 1
Patch Exists: YES
Related CWE: CVE-2003-0252
CPE: o:surfnow:surfnow
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2003

A problem has been identified in the handling of specific types of requests by SurfNOW

A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable implementation, denying service to the user.

Mitigation:

Upgrade to the latest version of SurfNOW
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/9519/info

A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable implementation, denying service to the user. 

GET \aaaaaaaaaaaaa[ 490 kb of a ]aaaa HTTP/1.1\n\n\n