Vulnerabilities > CVE-2001-0386 - Denial of Service vulnerability in Simpleserver WWW AUX Directory

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
analogx
nessus
exploit available
NVD
Published: 2001-07-02
Updated: 2017-10-10

Summary

AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.

Vulnerable Configurations

Part Description Count
Application
Analogx
5

Exploit-Db

descriptionSimpleserver WWW 1.0.x AUX Directory Denial of Service Vulnerability. CVE-2001-0386. Dos exploit for windows platform
idEDB-ID:20771
last seen2016-02-02
modified2001-04-17
published2001-04-17
reporternemesystm
sourcehttps://www.exploit-db.com/download/20771/
titleSimpleserver WWW 1.0.x AUX Directory Denial of Service Vulnerability

Nessus

NASL familyWeb Servers
NASL idHTTP_W98_DEVNAME_DOS.NASL
descriptionIt was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm, or AUX. An attacker could exploit this flaw to deny service to the affected system.
last seen2020-06-01
modified2020-06-02
plugin id10930
published2002-03-29
reporterThis script is Copyright (C) 2002-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10930
titleMultiple Web Server on Windows MS/DOS Device Request Remote DOS

References