Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Servers :: httpd1~4.htm

OmniHTTPd Pro DoS



Vulnerability

    OmniHTTPd Pro

Affected

    OmniHTTPd Pro

Description

    Following  is  based  on   a  Strumpf  Noir  Society   Advisories.
    OmniHTTPd Pro  is a  powerful all-purpose  industry compliant  web
    server built specifically for the Windows 9x and NT platforms.

    The OmniHTTPd  Pro web  server is  susceptible to  a DoS through a
    lengthy POST request.   If such a  request is made  to the  server
    which exceeds  4111 bytes  in size  the server  process will  die.
    Neither  the  request  or  the  crash  are  recorded in the server
    logfiles.

    This was tested against OmniHTTPd Pro v2.08 on WINNT4.

Solution

    Momentarily no fix for the problem appears forthcoming.


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH