Xitami HTTP Server Multiple Socket HEAD Request Remote Denial Of Service Vulnerability

Bugtraq ID:	34681
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 22 2009 12:00AM
Updated:	Apr 28 2009 02:26PM
Credit:	Jonathan Salwan
Vulnerable:	Imatix Xitami 5.0a0 - Compaq OpenVMS 7.3 VAX - Compaq OpenVMS 7.3 Alpha - IBM OS/2 Warp Server 4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Xitami HTTP Server Multiple Socket HEAD Request Remote Denial Of Service Vulnerability

Xitami HTTP server is prone to a denial-of-service vulnerability because it fails to adequately handle multiple socket requests.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Xitami 5.0a0 (Alpha 0) is vulnerable.

Xitami HTTP Server Multiple Socket HEAD Request Remote Denial Of Service Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.

The following exploit code is available:

• /data/vulnerabilities/exploits/34681.pl

Xitami HTTP Server Multiple Socket HEAD Request Remote Denial Of Service Vulnerability

Solution:
The vendor has prepared a patch. Please contact the vendor for details.

Xitami HTTP Server Multiple Socket HEAD Request Remote Denial Of Service Vulnerability

References:

• Xitami Homepage (iMatix)
  
• 1 - Crash in http_driver_file_agent.c (iMatix)