Description
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large number of concurrent sessions.
References
- xitami-keep-alive-dos(9751) vdb-entry
- 20020804 Clarification on Xitami DoS mailing-list
- 20020802 Xitami Connection Flood Server Termination Vulnerability mailing-list
- 5394 vdb-entry