Customer Area
Need help?
Try CSI
Scan Now
Secunia Advisory SA13045Apache "Space Headers" Denial of Service Vulnerability
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
Chintan Trivedi has discovered a vulnerability in Apache, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the parsing routine for headers with a large amount of spaces. This can be exploited by sending some specially crafted requests with a large amount of overly long headers containing only spaces. Successful exploitation can cause the server to become unreachable and use a large amount of CPU resources, but will regain functionality once the attack stops. The vulnerability has been confirmed on version 2.0.52 running Linux. Other versions may also be affected. Solution Provided and/or discovered by Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
312 views
103 views
