DoS против small http

Наблюдается утечка к памяти при запросе листинга каталога с отсутствующим index.html, сервер перестает отвечать на запросы, если соединения закрывается до начала передачи данных клиенту, кроме того есть локальные атаки...

CVE-2000-0353

Pine 4.x is affected by CVE-2000-0353. A remote attacker can trigger arbitrary commands by providing an index.html that executes lynx to fetch a uudecoded file from a malicious web server, which is then executed by Pine. Impact is described as full confidentiality, integrity, and availability com...

CVE-1999-0569

CVE-1999-0569 describes a directory listing vulnerability where a WWW directory URL without an index.html enables auto-indexing, revealing a full file listing. Public sources in connected documents confirm direct exposure of directory contents (confidentiality) and potential impact on integrity a...

CVE-1999-0569

A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file...