[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Easy Address Book Web Server Format String Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Easy Address Book Web Server Format String Vulnerability
- From: revnic@xxxxxxxxx
- Date: 4 Sep 2006 19:41:51 -0000
Easy Address Book Web Server Format String Vulnerability
Software: Easy Address Book Web Server
Version: 1.2
Website: http://www.efssoft.com/
Description:
Easy Address Book Web Server is a Web Address Book software that allows users
to view, search, add, edit, or administer address books easily through a Web
Browser.
Vulnerability:
By sending a specially crafted HTTP request, a remote attacker can crash or
compromise the server.
Denial of Service example:
http://[host]/?%25n
Credit:
Discovered by Revnic Vasile