| Titre | iMatrix Xitami 2.5 Denial of Service |
|---|
| Description | The technique works well on Windows XP Professional Service Pack 2 and 3 (English).
For this exploration I tried several strategies to increase reliability and performance:
The server did not correctly handle the request with large amounts of data sent in the If-Modified-Since header, causing the web server to crash.
A 952-byte request in the If-Modified-Since header for the web server to process crashes the server while receiving and processing the data, causing denial of service conditions.
Successful exploitation of these issues allows remote attackers to crash the affected server, denying service to legitimate users. |
|---|
| La source | ⚠️ https://packetstormsecurity.com/files/176546/Xitami-2.5-Denial-Of-Service.html |
|---|
| Utilisateur | fernando.mengali (UID 60856) |
|---|
| Soumission | 15/01/2024 15:44 (il y a 3 ans) |
|---|
| Modérer | 19/01/2024 10:48 (4 days later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 3327 [Xitami HTTP Server HTTP Request If-Modified-Since buffer overflow] |
|---|
| Points | 0 |
|---|