GoAhead WebServer HTTP Requests Denial Of Service Vulnerability

Bugtraq ID:	52445
Class:	Input Validation Error
CVE:	CVE-2009-5111
Remote:	Yes
Local:	No
Published:	Jun 17 2009 12:00AM
Updated:	Mar 19 2015 08:51AM
Credit:	RSnake
Vulnerable:	GoAhead Software GoAhead Webserver (Windows) 2.1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME GoAhead Software GoAhead WebServer 2.1.8 GoAhead Software GoAhead WebServer 2.1.7 GoAhead Software GoAhead WebServer 2.1.6 GoAhead Software GoAhead WebServer 2.1.5 GoAhead Software GoAhead WebServer 2.1.4 GoAhead Software GoAhead WebServer 2.1.3 GoAhead Software GoAhead WebServer 2.1.2 GoAhead Software GoAhead WebServer 2.1.1 GoAhead Software GoAhead WebServer 2.1 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows CE 3.0 - Microsoft Windows CE 2.0 - Microsoft Windows NT 4.0 GoAhead Software GoAhead WebServer 2.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows CE 3.0 - Microsoft Windows CE 2.0 - Microsoft Windows NT 4.0 GoAhead Software GoAhead WebServer 2.5 GoAhead Software GoAhead WebServer 2.18 GoAhead Software GoAhead WebServer 0
Not Vulnerable:

GoAhead WebServer HTTP Requests Denial Of Service Vulnerability

GoAhead WebServer is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to consume all available sockets, resulting in a denial-of-service condition.

GoAhead WebServer HTTP Requests Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GoAhead WebServer HTTP Requests Denial Of Service Vulnerability

References:

• GoAhead WebServer Homepage (GoAhead Software)
  
• Slowloris HTTP DoS (ha.ckers)