Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:14155
HistorySep 06, 2006 - 12:00 a.m.

Easy Address Book Web Server Format String Vulnerability

2006-09-0600:00:00
vulners.com
24

Easy Address Book Web Server Format String Vulnerability

Software: Easy Address Book Web Server
Version: 1.2
Website: http://www.efssoft.com/

Description:
Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily through a Web Browser.

Vulnerability:
By sending a specially crafted HTTP request, a remote attacker can crash or compromise the server.

Denial of Service example:
http://[host]/?%25n

Credit:
Discovered by Revnic Vasile