PHP 'Content-Length'标头远程服务访问漏洞

BUGTRAQ ID: 52704 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在实现上存在远程拒绝服务漏洞，如果发送带有较大的Content-Length标头值的HTTP请求到内置的PHP网络服务器，攻击者可利用此漏洞耗尽可用的内存，拒绝服务合法用户。 0 PHP 5.5.0-DEV PHP 5.4.1RC1-DEV 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net !/usr/bin/python Title: PHP 5.4....

PHP 5.4.0 Built-in Web Server DoS PoC

No description provided by source. !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

This host is running PHP Built-in WebServer and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbuiltinwebsrvdosvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

PHP Built-in WebServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 5.4.0 Built-in Web Server DoS PoC

Exploit for multiple platform in category dos / poc !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls email protected Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length heade...

PHP 5.4.0 Built-in Web Server - Denial of Service (PoC)

PHP 5.4.0 Built-in Web Server - Denial of Service PoC !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the...

PHP 5.4.0 Built-in Web Server - Denial of Service (PoC)

!/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is passed directly to a pemalloc call in...

PHP 5.4.0 Denial Of Service

!/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is passed directly to a pemalloc call in...

PT-2022-7650

Name of the Vulnerable Software and Affected Versions Puma versions prior to 4.3.12 Puma versions prior to 5.6.4 Description The issue is related to the handling of HTTP requests in Puma, a server for Ruby/Rack applications. When Puma is used behind a proxy that does not properly validate incomin...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5224)

Mozilla Firefox was updated to version 3.6.23, fixing various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certai...

CoDeSys 3.4 - POST Null Pointer Content-Length Parsing Remote Denial of Service

CoDeSys 3.4 - POST Null Pointer Content-Length Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/50854/info CoDeSys is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to crash the application and deny service to legitimate users...

V-CMS 1.0 Shell Upload

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Window...

Grand network SMS ddos attack vulnerabilities and fixes-vulnerability warning-the black bar safety net

Brief description: Grand online presence SMSddosattack vulnerability Detailed description: Grand online Forgot Password at will to the phone to send verification code, The URL: http://pwd.sdo.com/ptinfo/safecenter/getpwd/ChgPwdStepOldPwd.aspx?showbindmobile=1 Phone numbers can be arbitrarily...

CVE-2011-3000

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...

Mozilla: Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39)

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...

Cogent DataHub Integer Overflow Vulnerability

Cogent DataHub is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service crash via a negative or large Content-Length value...

CVE-2011-3501

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service crash via a negative or large Content-Length value...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

PT-2011-4472

Name of the Vulnerable Software and Affected Versions Progea Movicon / PowerHMI versions 11.2.1085 and earlier Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...