Test ID:	1.3.6.1.4.1.25623.1.0.900402
Category:	Denial of Service
Title:	Pi3Web ISAPI Requests Handling DoS Vulnerability
Summary:	Pi3Web is prone to ISAPI Requests Handling DoS vulnerability.
Description:	Summary: Pi3Web is prone to ISAPI Requests Handling DoS vulnerability. Vulnerability Insight: This vulnerability is due to insufficient checks on incoming HTTP requests in the 'ISAPI' directory. This can be exploited via 'install.daf', 'readme.daf', or 'users.txt' files in the affected directory. Vulnerability Impact: Successful exploitation will crash Pi3Web Server. Affected Software/OS: Pi3Wed.org Pi3Web version 2.0.13 and prior on all running platforms. Solution: - Disable ISAPI mapping in server configuration in Server Admin-> Mapping Tab. - Delete the users.txt, install.daf and readme.daf in ISAPI folder. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6938 BugTraq ID: 32287 http://www.securityfocus.com/bid/32287 Bugtraq: 20081122 Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Google Search) http://www.securityfocus.com/archive/1/498575 Bugtraq: 20081122 Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2008-11/0171.html Bugtraq: 20081201 Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Google Search) http://www.securityfocus.com/archive/1/498602 http://www.securityfocus.com/archive/1/498770 http://www.securityfocus.com/archive/1/498771 Bugtraq: 20081203 Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Google Search) http://www.securityfocus.com/archive/1/498865 https://www.exploit-db.com/exploits/7109 http://www.osvdb.org/49998 http://www.osvdb.org/49999 http://secunia.com/advisories/32696 XForce ISS Database: pi3web-isapi-dos(46600) https://exchange.xforce.ibmcloud.com/vulnerabilities/46600
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.