HTTP: Webster HTTP Server Long Request Buffer Overflow

This signature detects attempts to exploit a known flaw in the Webster HTTP server. An attacker can send an overlong URL which could result in arbitrary code execution.

Extended Description

A buffer overrun has been discovered in Webster HTTP server when processing malicious URLs. It is possible to trigger this vulnerability by passing an affected server a malconstructed URL of excessive length. Successful exploitation of this issue may allow an attacker to overwrite sensitive locations in memory with malicious values. This may result in the execution of arbitrary code with the privileges of Webster.

Affected Products

Webster webster_http_server

References

BugTraq: 6289

CVE: CVE-2002-2268

URL: http://www.netdave.com/webster/webster.htm http://www.microsoft.com/msj/archive/s25f.aspx

Short Name

HTTP:EXPLOIT:WEBSTER-URL-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Webster HTTP Server Long Request Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?