Secunia

Sowhat has reported two vulnerabilities and a weakness in Active Webcam, which can be exploited by malicious people to cause a DoS (Denial of Service) and detect the presence of local files.

1) An input validation error can be exploited to cause a vulnerable server to become unaccessible by requesting a specially crafted file.

Example:
http://[victim]:8080/A:\a.txt

The vulnerability has been confirmed in version 5.5. Other versions may also be affected.

2) Different error messages are returned to users depending on whether a given file exists or not. This can be exploited to detect the presence of local files.

Example:
http://[victim]:8080/c:\test.txt

It is also possible to disclose the full installation path by requesting a non-existing file.

The weakness has been confirmed in version 5.5. Other versions may also be affected.

3) An error in the HTTP communication handling can be exploited to crash a vulnerable service by sending a large amount of HTTP requests (more than 1000).

The vulnerability has been reported in version 5.5. Other versions may also be affected.

Solution
Filter traffic to the HTTP server or use another product.

Provided and/or discovered by
Sowhat

Changelog
Further details available in Customer Area

Original Advisory
http://secway.org/advisory/ad20050104.txt

Deep Links
Links available in Customer Area