[Zope] Easy Zope DoS ?

Thomas B. Passin tpassin@mitretek.org
Tue, 21 May 2002 16:48:41 -0400


I wrote,


> [John Adams]
>
> >
> > It seems that if I've started the zope server from the command line, and
> > then telnet to the port it's running on (8080) and issue a malformed
HTTP
> > request, I can kill the server. Does anyone else experience this?
> >
> > i.e.
> >
> > % telnet www 8080
> > GET /<press return>
> > <press return>
> >
> > The server goes down for the count after this.
> >
>
> Not on Win2000.  At least, not exactly.  What I do get is no echo - I
don't
> see what I typed, and get no response until I type quite a few <return>s.
> Whenever I connect to Zope with telnet, when it finally responds, it then
> disconnects from the telnet session.  Zope is still running though.
>

Forgot to say that this is Zope 2.3.3.

Tom P