apt-www-proxy NULL HTTP Request Denial Of Service Vulnerability

Bugtraq ID:	6339
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 09 2002 12:00AM
Updated:	Dec 09 2002 12:00AM
Credit:	Discovery of this vulnerability credited to "dong-h0un U" <[email protected]>.
Vulnerable:	apt-www-proxy apt-www-proxy 0.1
Not Vulnerable:

apt-www-proxy NULL HTTP Request Denial Of Service Vulnerability

A denial of service vulnerability has been reported for apt-www-proxy. Reportedly, apt-www-proxy will crash when it receives a NULL HTTP request.

apt-www-proxy NULL HTTP Request Denial Of Service Vulnerability

There is no exploit required.

apt-www-proxy NULL HTTP Request Denial Of Service Vulnerability

Solution:
An unofficial patch has been provided by "dong-h0un U" <[email protected]>. Further details are available in the referenced message.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

apt-www-proxy NULL HTTP Request Denial Of Service Vulnerability

References:

• Remote multiple vulnerability in apt-www-proxy. ("dong-h0un U" )