medium5.0Public exploit code
CVE-2001-0558
T.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- T. Hauck Jana Server 1.45/1.46/2.0 - MS-DOS Device Name Denial of Service2001-05-07 · dos · windows · Verified
Impact
T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| T. Hauck | Jana Web Server | Versions 1.45, 1.46, 2.0b2, 2.0beta1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html
- http://www.osvdb.org/1817
- http://www.securityfocus.com/bid/2704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6521
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html
- http://www.osvdb.org/1817
- http://www.securityfocus.com/bid/2704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6521