Reptile Web Server HTTP Request Flaw Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1008842 |
|
SecurityTracker URL: http://securitytracker.com/id/1008842
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Jan 25 2004
|
Impact:
Denial of service via network
|
Exploit Included: Yes
|
Version(s): "daily version" (dated January 4, 2002)
|
Description:
A vulnerability was reported in the Reptile Web Server. A remote user can cause denial of service conditions on the target system.
Donato Ferrante reported that a remote user can send a series of HTTP GET requests that do not contain the HTTP version string to cause the target web service to consume excessive CPU resources.
It is reported that a remote user can send the following request (assuming that the requested file is a file that exists on the target server) approximately 10 times to cause denial of service conditions on the server:
GET index.htm
|
Impact:
A remote user can cause excessive CPU resource consumption on the target system.
|
Solution:
No solution was available at the time of this entry.
The report indicates that the project is no longer supported.
|
Vendor URL: sourceforge.net/projects/reptilews (Links to External Site)
|
Cause:
State error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Sat, 24 Jan 2004 18:41:40 +0100
Subject: Resources consumption in Reptile webserver daily version
|
Donato Ferrante
Application: Reptile Web Server
http://sourceforge.net/projects/reptilews
Version: daily version
Bug: resources consumption
Author: Donato Ferrante
e-mail: fdonato@autistici.org
web: www.autistici.org/fdonato
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1. Description
2. The bug
3. The code
4. The fix
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
----------------
1. Description:
----------------
Vendor's Description:
"Reptile is a web server made in Python. It supports server side
scripting with "Embedded Python", PHP, and CGI scripts. It has an
integrated HTML/XML validator that checks the pages before publication
and others handy features."
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
------------
2. The bug:
------------
The program doesn't well manage the user input string.
In fact it waits the HTTP version. So an attacker can consume a lot of
CPU resources, sending crafted strings.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-------------
3. The code:
-------------
To test the vulnerability simply send to the webserver some (about 10)
strings like:
GET index.htm
without specify the HTTP* at the end of the GET request, and where
the requested file must be avaible in the public_html directory.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
------------
4. The fix:
------------
No fix.
Reptile Web Server is no more supported.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
