~100kb HTTP request can consume 100 percent of one CPU

Ivan · 28. 12. 2011.

Citat:

What makes the bug particularly worrisome is that it enables attackers to use limited means to launch a devastating denial-of-service (DoS) attack against web servers. According to Microsoft, "a single, specially crafted ~100kb HTTP request can consume 100 percent of one CPU core for between 90 to 110 seconds."

Link: http://www.scmagazine.com/microsoft-...rticle/220921/

DDoS 2.0

ivanhoe · 28. 12. 2011.

to pogadja i PHP i Ruby i Python, stim sto su za ruby i python izasli patchevi valjda

jablan · 28. 12. 2011.

^ Za Ruby 2008.

Ovde ima više tehnikalija:

http://seclists.org/fulldisclosure/2011/Dec/477

ivanhoe · 28. 12. 2011.

Citat:

Originalno napisao jablan

^ Za Ruby 2008.

perl je ispravio to jos 2003. :P

webarto · 28. 12. 2011.

Kad sam zakupio server, nije bilo moguće uploadovati file veći do 100kb, to jeste započne, i kada tu stigne, izbaci error 500, vjerovatno radi toga bila ta restrikcija.

jablan · 29. 12. 2011.

http://nikic.github.com/2011/12/28/S...PHP-array.html

degojs · 29. 12. 2011.

ASP.NET Security Update Shipping Thursday, Dec 29th.

Vendor: Adobe
Status: Unknown
Notified: 2011-11-01
Updated: 2011-11-01

Apache Tomcat
Affected
2011-12-28
2011-12-28

IBM Corporation
Unknown
2011-11-01
2011-11-01

Microsoft Corporation
Affected
2011-11-01
2011-12-29

Oracle Corporation
Unknown
2011-11-01
2011-11-01

Ruby
Affected
2011-11-01
2011-12-28

The PHP Group
Affected
2011-12-28
2011-12-28

jablan · 29. 12. 2011.

Citat:

Originalno napisao degojs

Ruby
Not Affected

http://stackoverflow.com/questions/1...eter-instances

degojs · 29. 12. 2011.

CERT kaze da jeste, mozda se odnosi na razlicite verzije, ne znam, nisam detaljnije gledao.

http://www.kb.cert.org/vuls/id/903934

28. 12. 2011.	#2
ivanhoe Ivan Dilber Sir Write-a-Lot Datum učlanjenja: 18.10.2005 Lokacija: Bgd Poruke: 5.320 Hvala: 104 2.344 "Hvala" u 583 poruka	to pogadja i PHP i Ruby i Python, stim sto su za ruby i python izasli patchevi valjda __________________ Leadership is the art of getting people to want to do what you know must be done.

28. 12. 2011.	#3
jablan VD IT Direktora Invented the damn thing Datum učlanjenja: 08.06.2005 Lokacija: Beograd Poruke: 2.118 Hvala: 503 1.307 "Hvala" u 282 poruka	^ Za Ruby 2008. Ovde ima više tehnikalija: http://seclists.org/fulldisclosure/2011/Dec/477 __________________ blog

28. 12. 2011.	#5
webarto expert Grand Master Datum učlanjenja: 11.04.2010 Poruke: 998 Hvala: 141 959 "Hvala" u 153 poruka	Kad sam zakupio server, nije bilo moguće uploadovati file veći do 100kb, to jeste započne, i kada tu stigne, izbaci error 500, vjerovatno radi toga bila ta restrikcija. __________________ Github // LinkedIn // PHP // ZCE // Stackoverflow PHP // Site5 Web Hosting

29. 12. 2011.	#6
jablan VD IT Direktora Invented the damn thing Datum učlanjenja: 08.06.2005 Lokacija: Beograd Poruke: 2.118 Hvala: 503 1.307 "Hvala" u 282 poruka	http://nikic.github.com/2011/12/28/S...PHP-array.html __________________ blog

29. 12. 2011.	#7
degojs I'm a PC too. Wrote a book Datum učlanjenja: 05.06.2005 Lokacija: Kanada Poruke: 1.354 Hvala: 82 130 "Hvala" u 89 poruka	ASP.NET Security Update Shipping Thursday, Dec 29th. Vendor: Adobe Status: Unknown Notified: 2011-11-01 Updated: 2011-11-01 Apache Tomcat Affected 2011-12-28 2011-12-28 IBM Corporation Unknown 2011-11-01 2011-11-01 Microsoft Corporation Affected 2011-11-01 2011-12-29 Oracle Corporation Unknown 2011-11-01 2011-11-01 Ruby Affected 2011-11-01 2011-12-28 The PHP Group Affected 2011-12-28 2011-12-28 __________________ Commercial-Free !!! Poslednja izmena od degojs : 29. 12. 2011. u 18:48.

Alati teme
Pogledajte verziju za štampanje Pošaljite email-om ovu stranu
Način prikaza
Prebacite u linearni prikaz Hibridni prikaz Prebacite u prikaz po temama