SW-HTTPD Incomplete HTTP Request Remote Denial of Service Vulnerability

Bugtraq ID:	34188
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 19 2009 12:00AM
Updated:	Mar 20 2009 04:36PM
Credit:	Jonathan Salwan
Vulnerable:	SW-HTTPD SW-HTTPD 0.1
Not Vulnerable:

SW-HTTPD Incomplete HTTP Request Remote Denial of Service Vulnerability

SW-HTTPD is prone to a denial-of-service vulnerability because the application fails to handle malformed HTTP requests.

An attacker can exploit this issue to prevent the server from handling new requests, denying service to legitimate users.

SW-HTTP 0.1 is vulnerable; other versions may also be affected.

SW-HTTPD Incomplete HTTP Request Remote Denial of Service Vulnerability

Attackers can exploit this issue via readily available network tools.

The following exploit is available:

• /data/vulnerabilities/exploits/34188.c

SW-HTTPD Incomplete HTTP Request Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SW-HTTPD Incomplete HTTP Request Remote Denial of Service Vulnerability

References:

• SW-HTTPD Homepage (SW-HTTPD)