• info
• discussion
• exploit
• solution
• references

Yaws Multiple Header Request Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian yaws_1.65-4etch1_arm.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_a rm.deb

Debian Linux 5.0 ia-64

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _ia64.deb

Debian Linux 4.0 powerpc

• Debian yaws_1.65-4etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_p owerpc.deb

Debian Linux 5.0 alpha

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _alpha.deb

Debian Linux 5.0 ia-32

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _i386.deb

Debian Linux 5.0 s/390

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _s390.deb

Debian Linux 5.0 mipsel

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _mipsel.deb

Debian Linux 4.0 amd64

• Debian yaws_1.65-4etch1_amd64.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_a md64.deb

Debian Linux 4.0 ia-32

• Debian yaws_1.65-4etch1_i386.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_i 386.deb

Debian Linux 5.0 hppa

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _hppa.deb

Debian Linux 4.0 sparc

• Debian yaws_1.65-4etch1_sparc.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_s parc.deb

Debian Linux 4.0 s/390

• Debian yaws_1.65-4etch1_s390.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_s 390.deb

Debian Linux 5.0 m68k

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb

Debian Linux 5.0 arm

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _arm.deb

Debian Linux 4.0 alpha

• Debian yaws_1.65-4etch1_alpha.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_a lpha.deb

Debian Linux 5.0 armel

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _armel.deb

Debian Linux 5.0

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb

Debian Linux 5.0 amd64

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _amd64.deb

Debian Linux 4.0 mipsel

• Debian yaws_1.65-4etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_m ipsel.deb

Debian Linux 5.0 mips

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _mips.deb

Debian Linux 5.0 powerpc

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _powerpc.deb

Debian Linux 4.0 ia-64

• Debian yaws_1.65-4etch1_ia64.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_i a64.deb

Debian Linux 4.0 mips

• Debian yaws_1.65-4etch1_mips.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.65-4etch1_m ips.deb

Debian Linux 5.0 sparc

• Debian yaws-chat_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-chat_1.77-3+l enny1_all.deb


• Debian yaws-mail_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-mail_1.77-3+l enny1_all.deb


• Debian yaws-wiki_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-wiki_1.77-3+l enny1_all.deb


• Debian yaws-yapp_1.77-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws-yapp_1.77-3+l enny1_all.deb


• Debian yaws_1.77-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/y/yaws/yaws_1.77-3+lenny1 _sparc.deb