Tiny Server HTTP GET Request Remote Denial of Service Vulnerability

Bugtraq ID:	52643
Class:	Boundary Condition Error
CVE:	CVE-2012-1783
Remote:	Yes
Local:	No
Published:	Feb 25 2012 12:00AM
Updated:	Feb 25 2012 12:00AM
Credit:	localh0t
Vulnerable:	Tiny Server Tiny Server 1.1.9
Not Vulnerable:

Tiny Server HTTP GET Request Remote Denial of Service Vulnerability

Tiny Server is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Tiny Server 1.1.9 is affected; other versions may also be vulnerable.

Tiny Server HTTP GET Request Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/52643.py

Tiny Server HTTP GET Request Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Tiny Server HTTP GET Request Remote Denial of Service Vulnerability

References:

• Tiny Server Homepage (Tiny Server)