CNCVE编号:CNCVE-20020048 CVE编号: 安全级别:高 漏洞中文描述: Phusion Webserver是一个商业的HTTP服务器,它运行于Microsoft Windows平台。Phusion Webserver存在拒绝服务的漏洞。一个远程攻击者给服务器提交一个大于3000字节的超长web请求就可能引起服务器拒绝服务。这个问题是因为Phusion Webserver发生了缓冲溢出。 漏洞英文描述: Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. It is possible for a remote attacker to deny service to legitimate users of the service by submitting an excessively long web request (approximately 3000+ bytes). It should be noted that this issue is due to a remotely exploitable buffer overflow condition. 漏洞参考: http://archives.neohapsis.com/archives/bugtraq/2002-02/0180.html http://www.bbshareware.com/phusion/ 系统类型:其他 漏洞类型:输入有效性检查错误