Forgot your password?
New user?
Slowloris HTTP DoS
A low-bandwidth DoS attack which many webservers are vulnerable to has been released.
"Slowloris holds connections open by sending partial HTTP requests. It continues to send subsequent headers at regular intervals to keep the sockets from closing. In this way webservers can be quickly tied up. In particular, servers that have threading will tend to be vulnerable, by virtue of the fact that they attempt to limit the amount of threading they'll allow."
Source - http://ha.ckers.org/slowloris/
There is also a Slashdot discussion on the topic here: http://it.slashdot.org/story/09/06/19/1243203/Attack-On-a-Significant-Flaw-In-Apache-Released
Colloquium F09-7: Santanu Chaudhuri
