HTTP: Webster Long GET Request Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Webster HTTPd that ships with the MSDN Samples Pack. Attackers can send a maliciously crafted GET request to the host to execute arbitrary code with the permissions of the user running the Web server.

Extended Description

An attacker can cause a denial of service or execute arbitrary code with the privileges of the HTTP service process.

References

URL: http://www.securiteam.com/windowsntfocus/6R0030A6AY.html http://www.netdave.com/webster/webster.htm

Short Name

HTTP:WEBSTER:LONG-GET-REQ

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Webster Long GET Request Buffer Overflow

Extended Description

References

Found a potential security threat?