HexBrain

Gratipay · Report #112687

grtp.co is vulnerable to http-vuln-cve2011-3192

Informativestatus
1upvotes
12 Feb 2016disclosed

How it was found

vulnerability i have found!

| http-vuln-cve2011-3192:

| VULNERABLE:

| Apache byterange filter DoS

| State: VULNERABLE

| IDs: CVE:CVE-2011-3192 OSVDB:74721

| The Apache web server is vulnerable to a denial of service attack when numerous

| overlapping byte ranges are requested.

| Disclosure date: 2011-08-19

About Vulnerability

The byterange filter in the Apache HTTP Server 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, exploit called "Apache Killer"

i have tested it using nmap and metasploit and is 100% vulnerable when i found it i tested it in metasploit i used auxiliary/dos/http/apache_range_dos

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original