Project

General

Profile

Actions

Bug #2003

closed

ssl remote crash

Added by nitrox almost 15 years ago. Updated almost 15 years ago.

Status:
Fixed
Priority:
Urgent
Category:
core
Target version:
ASK QUESTIONS IN Forums:

Description

If your lighttpd accepts ssl connections it it possible to crash it remotely via

echo foobar | openssl s_client -connect yourip:443 -ign_eof


Files

fix-ssl-dos.patch (686 Bytes) fix-ssl-dos.patch stbuehler, 2009-06-10 06:28

Related issues 1 (0 open1 closed)

Has duplicate Bug #1873: a core-bug caused by incomplete https requestFixed2009-01-15Actions
Actions #1

Updated by stbuehler almost 15 years ago

Actions #2

Updated by stbuehler almost 15 years ago

  • Status changed from New to Fixed
  • % Done changed from 0 to 100

Applied in changeset r2513.

Actions #3

Updated by stbuehler almost 15 years ago

This is btw 1.5 only.

Actions

Also available in: Atom