Nessus Plugin #11130

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

BrowseGate HTTP headers overflows

Family:

Gain root remotely

Category:

destructive_attack

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Too long HTTP headers kill BrowseGate

Version:

$Revision: 1.10 $

Cve_id:

CVE-2000-0908

Bugtraq_id:

1702

Xrefs:

-

Description:

It was possible to kill the BrowseGate
proxy by sending it an invalid request with too long HTTP headers
(Authorization and Referer)

A cracker may exploit this vulnerability to make your web server
crash continually or even execute arbirtray code on your system.

Solution : upgrade your software or protect it with a filtering reverse proxy
Risk factor : High