Summary
It is possible to kill the Sambar web server 'server.exe' by sending it a long request like:
/cgi-win/testcgi.exe?XXXX...X
/cgi-win/cgitest.exe?XXXX...X
/cgi-win/Pbcgi.exe?XXXXX...X
(or maybe in /cgi-bin/)
A cracker may use this flaw to make your server crash continuously, preventing you from working properly.
Solution
upgrade your server to Sambar 51p or delete those CGI.
Severity
Classification
-
CVE CVE-2002-0128 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities