Description
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
References
- http://freshmeat.net/redir/cherokee/20646/url_changelog/ChangeLog
- 9345 vdb-entry
- 3306 vdb-entry
- cherokee-post-request-dos(14119) vdb-entry
- 10518 third-party-advisory