DEBIAN-CVE-2012-5533

The httprequestsplitvalue function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service infinite loop via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header...

FreeBSD : lighttpd -- remote DoS in header parsing (1cd3ca42-33e6-11e2-a255-5404a67eef98)

Lighttpd security advisory reports : Certain Connection header values will trigger an endless loop, for example : 'Connection: TE,,Keep-Alive' On receiving such value, lighttpd will enter an endless loop, detecting an empty token but not incrementing the current string position, and keep reading...

DEBIAN-CVE-2010-2435

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...

CVE-2010-2435: Improper Input Validation

Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...

Novell eDirectory Host Environment Service (dhost.exe) HTTP Connection Header DoS

The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by a denial of service issue. By sending an HTTP request with a specially crafted 'Connection' header to the server, an unauthenticated attacker may be able to trigger ...

CVE-2008-0927: Undefined Security Weakness

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with 1 multiple Connection headers or 2 a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777...