CVE-2000-0290: Buffer Overflow
Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
4D WebStarfrom your environment.Uninstall or disable the 4D WebStar HTTP server if it is not required in your environment.
- Configuration
Configure WebStar (or any front-end/proxy) to reject HTTP request lines and URLs that exceed a safe maximum length to prevent buffer overflow from long GET requests.
4D WebStar maximum URL/request-line length = reject requests exceeding a safe length - Compensating control
Deploy a web application firewall, reverse proxy, or IPS to detect and block HTTP GET requests with excessively long request lines/URLs. Alternatively, restrict access to the WebStar server to trusted IP ranges at the network firewall.
- Operational
Monitor WebStar access logs for unusually long GET requests and immediately block offending IP addresses or connections. Maintain an incident response plan to recover from crashes caused by this DoS vector.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0290?
CVE-2000-0290 is considered a high-severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2000-0290?
To fix CVE-2000-0290, upgrade the Webstar HTTP Server to a version that is not affected by this buffer overflow vulnerability.
Who is affected by CVE-2000-0290?
CVE-2000-0290 affects users running Webstar HTTP Server version 4.0.
What type of attack does CVE-2000-0290 allow?
CVE-2000-0290 allows remote attackers to conduct denial of service attacks by sending a long GET request.
Can CVE-2000-0290 be exploited remotely?
Yes, CVE-2000-0290 can be exploited remotely by attackers to crash the Webstar HTTP Server.