CVE-2002-1248 Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.
MediumCVSS 5.0
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| northern solutions xeneo web server | = 2.0.759.6 | No fix listed |
| northern solutions xeneo web server | = 2.1.0.0 | No fix listed |
References
- 20021104 iDEFENSE Security Advisory 11.04.02b: Denial of Service Vulnerability in Xeneo Web Server mailing-list
- www.idefense.com exploit patch vendor-advisory
- xeneo-php-dos(10534) vdb-entry vendor-advisory
- 6098 vdb-entry