[Kitetoa, les pizzaïolos du Ouèb

w00giving 99 -16-

  navbarrfest
Sommaire de ce dossier
Ze advisories
Ze linkz
 

Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K

USSR Advisory Code:   USSR-99026

Release Date:
December 28, 1999 [2/5]

Systems Affected:
Savant Web Server V2.0 Win9X / NT / 2K and possibly others versions.

About The Software:
Savant provides support for most modern web features and technologies,
including:

Common Gateway Interface (CGI) 1.0 and 1.1
HTTP 0.9, 1.0, and 1.1 including keep-alive ability
Comprehensive logging in the standard NCSA format
User and group management
Password protection
Server-side image maps
Support for over 40 file types, including MP3, RealAudio, and Microsoft
Office files
XML, JavaScript, Java, and ActiveX, and more!

THE PROBLEM

UssrLabs found a Local / Remote Buffer overflow,the buffer overflow is
caused by a NULL Character in the parsing Get Command rutine.

Example:
in Internet Explorer, address: Htpp://SavantServerIP/%00/


The D.O.S action is logged in, C:\Savant\Logs\general.txt, inside looks like
this one

Attacker Ip - - [20/Dec/1999:00:10:27 -0300] "GET
/%00/index.htmlindex.htmlindex.htmlindex.htmlindex.htmlindex.htmlindex.
htmlindex.htmlindex.htmlindex.htmlindex.htmlindex.htmlindex.html" 301 279



Do you do the w00w00?
This advisory also acts as part of w00giving. This is another contribution
to w00giving for all you w00nderful people out there. You do know what
w00giving is don't you? http://www.w00w00.org/advisories.html

Vendor Status:
Informed.

Vendor   Url: http://hera.wku.edu/~lamonml/savant/index.html
Program Url: http://hera.wku.edu/~lamonml/savant/download.html

Credit: USSRLABS

SOLUTION
Noting yet :(

Greetings:
Eeye, Attrition, w00w00, beavuh, Rhino9, ADM, L0pht, HNN, Technotronic and
Wiretrip.

u n d e r g r o u n d  s e c u r i t y  s y s t e m s  r e s e a r c h
http://www.ussrback.com

Liens de navigation

Naviguer, lire....

Page d'accueil

Nouveautés

Le Sommaire
de
Kitetoa

(orientation...)

Communiquer...

Le Forum
Kitetoa-blah-blah

Nous écrire

Les mailing-lists

Les stats du serveur

Qui sommes-nous?

Les rubriques!

Les livres publiés par Kitetoa

Les interviews

Kit'Investisseurs

Fonds d'écran et autres trucs

Les rubriques!
(suite)

KitEcout'

KessTaVu?-KiteToile

Voyages

la malle de Kitetoa
(vieilleries du site)

Les dossiers

Le monde fou des Admins

Tati versus Kitetoa

Tegam versus Guillermito

Malade mental...

Qui est Jean-Paul Ney,
condamné pour
menaces de mort
réitérées contre Kitetoa?

Le texte de la condamnation
de Jean-Paul Ney
(résumé html)
(complet pdf)

Malade mental, bis repetita

Jean-Paul Ney condamné
pour diffamation
à l'encontre du webmaster
de Kitetoa.com

Condamnation de Jean-Paul Ney
pour diffamation (pdf)

D'autres choses...

Aporismes.com

Statisticator

L'association Kite-Aide

Rechercher...

Rechercher
sur le site

et sur le Net...

Jean-Paul Ney

Jean-Paul Ney