Nessus Plugin #11715

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Header overflow against HTTP proxy

Family:

Gain root remotely

Category:

destructive_attack

Copyright:

This script is Copyright (C) 2003 Michel Arboi

Summary:

Too long HTTP header kills the HTTP proxy server

Version:

$Revision: 1.2 $

Cve_id:

CAN-2002-0133

Bugtraq_id:

3904, 3905

Xrefs:

-

Description:

It was possible to kill the HTTP proxy by
sending an invalid request with a too long header

A cracker may exploit this vulnerability to make your proxy server
crash continually or even execute arbitrary code on your system.

Solution : upgrade your software
Risk factor : High