COMMAND

	Omnicron OmniHttpd remote buffer overflow via long HTTP request

SYSTEMS AFFECTED

	OmniHTTPd v2.09

PROBLEM

	Martin J. Muench BED [http://www.codito.de] found while developping  the
	\"Bruteforce                     Exploit                      Detector\"
	[http://www.kryptocrew.de/snakebyte/bed.html] :
	

	When sending a malformed request with a HTTP version containing 4096  or
	more characters, the HTTPd crashes.
	

	Example:
	

	perl -e \'print \"HEAD / \".\"a\"x4096 .\"\\n\\n\"\' | nc 127.0.0.1 80

	

	This attack also works with every  other  request  types  like  \'GET\',
	\'POST\',... .

SOLUTION

	Nothing yet