Cherokee HTTP Post Remote Content Length Denial Of Service Vulnerability

Bugtraq ID:	9345
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 01 2004 12:00AM
Updated:	Jan 01 2004 12:00AM
Credit:	Discovery credited to <[email protected]>.
Vulnerable:	Cherokee-Project Cherokee HTTPD 0.4.6
Not Vulnerable:

Cherokee HTTP Post Remote Content Length Denial Of Service Vulnerability

A problem has been identified in the handling of HTTP POST requests by Cherokee. Because of this, it may be possible for a remote attacker to deny service to legitimate users of a vulnerable server.

Cherokee HTTP Post Remote Content Length Denial Of Service Vulnerability

There is no exploit required.

Cherokee HTTP Post Remote Content Length Denial Of Service Vulnerability

Solution:
The vendor has released a new version to address this issue.


Cherokee-Project Cherokee HTTPD 0.4.6

• Cherokee cherokee-0.4.6-20031231.tar.gz
  ftp://alobbs.com/cherokee/0.4.6/cherokee-0.4.6-20031231.tar.gz