Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:COBALT:SERVICE-DOS |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
Cobalt RAQ 4 Service.cgi Denial of Service |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Cobalt RAQ 4 Service.cgi Denial of Service
This signature detects attempts to exploit a known vulnerability against the service.cgi script that ships with the Cobalt RAQ 4 Server Management suite. Attackers can send a malicious request that contains a long argument for the service parameter to crash the system; the system must be manually restarted.
Extended Description
RaQ is a server appliance originally developed by Cobalt. It is now distributed and maintained by Sun Microsystems. Under some circumstances, the HTTP server of a Cobalt RaQ system may crash. When a remote user places an excessively long request to the service.cgi script, the results can be unpredictable. It has been reported that a request such as http://www.example.com:81/cgi-bin/.cobalt/alert/service.cgi?service=/AAAAAAAAA...(Ax100000)...AAA will cause the HTTP server to crash.
Affected Products
- Cobalt raq 2.0.0
- Cobalt raq 3.0.0
- Cobalt raq 4.0.0
- Sun cobalt_raq_2
- Sun cobalt_raq_4
References
- BugTraq: 4209
- CVE: CVE-2002-0348