 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.11129 |
| Category: | Gain a shell remotely |
| Title: | HTTP 1.1 Header Overflow DoS Vulnerability |
| Summary: | It was possible to kill the web server by sending an invalid; request with a too long HTTP 1.1 header (Accept-Encoding, Accept-Language, Accept-Range,; Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE,; Host) |
| Description: | Summary: It was possible to kill the web server by sending an invalid request with a too long HTTP 1.1 header (Accept-Encoding, Accept-Language, Accept-Range, Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE, Host) Vulnerability Impact: An attacker may exploit this vulnerability to make the web server crash continually or even execute arbirtray code on your system. Affected Software/OS: Lotus Domino Web Server prior to 6.0.1 and pServ are known to be affected. Other versions or products might be affected as well. Solution: Update your software or protect it with a filtering reverse proxy. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2003-0180 BugTraq ID: 6951 http://www.securityfocus.com/bid/6951 http://www.cert.org/advisories/CA-2003-11.html CERT/CC vulnerability note: VU#355169 http://www.kb.cert.org/vuls/id/355169 Computer Incident Advisory Center Bulletin: N-065 http://www.ciac.org/ciac/bulletins/n-065.shtml http://www.nextgenss.com/advisories/lotus-60dos.txt http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html XForce ISS Database: lotus-incomplete-post-dos(11360) https://exchange.xforce.ibmcloud.com/vulnerabilities/11360 Common Vulnerability Exposure (CVE) ID: CVE-2003-0181 XForce ISS Database: lotus-invalid-field-dos(11361) https://exchange.xforce.ibmcloud.com/vulnerabilities/11361 |
| Copyright | Copyright (C) 2002 Michel Arboi |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |