nessus-plugins/scripts SWS_DoS.nasl,1.6,1.7
Update of /usr/local/cvs/nessus-plugins/scripts
In directory raccoon.nessus.org:/tmp/cvs-serv15965
Modified Files:
SWS_DoS.nasl
Log Message:
o Name changed to something more generic
Index: SWS_DoS.nasl
===================================================================
RCS file: /usr/local/cvs/nessus-plugins/scripts/SWS_DoS.nasl,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -d -r1.6 -r1.7
<a href="3005.html#3062qlink1">--- SWS_DoS.nasl 26 Jun 2003 21:18:04 -0000 1.6
+++ SWS_DoS.nasl 28 Jun 2003 18:06:12 -0000 1.7
@@ -32,17 +32,17 @@
script_bugtraq_id(5664);
script_version("$Revision$");
<a href="3005.html#3062qlink2">- name["english"] = "SWS unfinished line DoS";
+ name["english"] = "HTTP unfinished line denail";
script_name(english:name["english"]);
desc["english"] = "
-We could crash the SWS web server by sending an unfinished
-line.
+We could crash the remote web server by sending an unfinished line.
+(ie: |Nessus| without a return carriage at the end of the line).
-A cracker may exploit this flaw to disable your service.
+A cracker may exploit this flaw to disable this service.
-Risk factor : High
+Risk factor : High
Solution : Upgrade your web server";
script_description(english:desc["english"]);
@@ -70,10 +70,8 @@
if (!get_port_state(port)) exit(0);
if(http_is_dead(port:port))exit(0);
-
soc = http_open_socket(port);
if (!soc) exit(0);
-
send(socket:soc, data:"|Nessus|");
- Previous by Date: nessus-plugins/scripts pam_smb.nasl,1.14,1.15
- Next by Date: nessus-plugins/scripts www_too_long_auth.nasl, 1.12, 1.13 www_too_long_cookie.nasl, 1.8, 1.9 www_too_long_header.nasl, 1.8, 1.9 www_too_long_header10.nasl, 1.10, 1.11 www_too_long_header11.nasl, 1.9, 1.10 www_too_long_method.nasl, 1.8, 1.9 www_too_long_options.nasl, 1.1, 1.2 www_too_long_post.nasl, 1.10, 1.11 www_too_long_url.nasl, 1.39, 1.40 www_too_long_useragent.nasl, 1.10, 1.11 www_too_long_version.nasl, 1.8, 1.9
- Previous by Thread: nessus-plugins/scripts SWS_DoS.nasl,1.4,1.5
- Next by Thread: nessus-plugins/scripts tcpip_ambiguities.nasl,1.4,1.5
-
Nessus-cvs June 2003 archives indexes sorted by: [ thread ]
[ subject ]
[ author ]
[ date ]
-
Nessus-cvs list archive Table of Contents
-
More information about the Nessus-cvs mailing list
This archive was generated by a fusion of
Pipermail 0.09 (Mailman edition) and
MHonArc 2.6.8.