Nessus Plugin #12200

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Incomplete basic authentication DoS

Family:

Denial of Service

Category:

denial

Copyright:

This script is Copyright (C) 2004 Michel Arboi

Summary:

Basic authentication without password chokes the web server

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

It was possible to kill the web server by
sending an invalid request with an incomplete Basic authentication.

A cracker may exploit this vulnerability to make your web server
crash continually or even execute arbirtray code on your system.

Solution : upgrade your software or protect it with a filtering reverse proxy
Risk factor : High