CVE-2010-0295
lighttpd < 1.4.26 and 1.5.x - Denial of Service via Slow Request Memory Consumption
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-0295. PoCs published by Li Ming.
AI-analyzed exploit summary This script exploits a denial-of-service vulnerability in lighttpd by launching multiple slow HTTP requests concurrently, causing the server to hang. It uses a separate C program (slow_client) to send requests slowly, overwhelming the server.
Description
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.
Exploits (1)
This script exploits a denial-of-service vulnerability in lighttpd by launching multiple slow HTTP requests concurrently, causing the server to hang. It uses a separate C program (slow_client) to send requests slowly, overwhelming the server.