AutoIndex PHP Script 2.2.2/2.2.3 - Index.PHP Denial of Service Vulnerability

2007-11-12T00:00:00
ID EDB-ID:30753
Type exploitdb
Reporter L4teral
Modified 2007-11-12T00:00:00

Description

AutoIndex PHP Script 2.2.2/2.2.3 Index.PHP Denial of Service Vulnerability. CVE-2007-5984. Dos exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/26410/info

AutoIndex PHP Script is prone to a remote denial-of-service vulnerability because the application fails to properly handle unexpected input.

Successfully exploiting this issue allows remote attackers to consume excessive CPU resources, potentially denying service to legitimate users.

AutoIndex PHP Script 2.2.2 and 2.2.3 are vulnerable to this issue; prior versions may also be affected.

http://www.example.com/AutoIndex/index.php?dir=%00