Xitami Malformed POST Request Infinite Loop Remote DoS

high Nessus Plugin ID 11934

Language:

Synopsis

The remote host is running a web server with a denial of service vulnerability.

Description

The remote host is running a vulnerable version of the Xitami web server. It is possible to freeze the remote web server by sending a malformed POST request. This is known to affect Xitami versions 2.5 and earlier.

Solution

Upgrade to the latest version of the software.

See Also

https://seclists.org/fulldisclosure/2003/Nov/840

Plugin Details

Severity: High

ID: 11934

File Name: xitami_POST_DoS.nasl

Version: 1.22

Type: remote

Family: Web Servers

Published: 12/1/2003

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 11/21/2003

Reference Information

BID: 9083

Secunia: 10275