CVE-2009-3749
Websense Email Security and Personal Email Manager - Denial of Service via HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3749. PoCs published by Nikolas Sotiriu.
AI-analyzed exploit summary This Perl script exploits a denial-of-service (DoS) vulnerability in Websense Email Security Web Administrator by sending rapid HTTP requests without waiting for responses, causing the server to crash. The script continuously sends 'GET /index.asp' requests to the target on port 8181, preventing the server from recovering.
Description
The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.
Exploits (1)
This Perl script exploits a denial-of-service (DoS) vulnerability in Websense Email Security Web Administrator by sending rapid HTTP requests without waiting for responses, causing the server to crash. The script continuously sends 'GET /index.asp' requests to the target on port 8181, preventing the server from recovering.