Maximum size of arbitrary code allowed

转载 2011年01月10日 09:32:00

The LimitRequestLine directive [17] in the Apache configuration file allows the web
server to reduce the size of an HTTP request . This includes all information passed in the
query as part of the GET request. The default value for this directive is 8190 bytes. If the
SQL Injection is discovered on the GET request and our query including the arbitrary code
8
is larger than this value, Apache web server would response with the HTTP Status Code
414 and the request would not be processed.
By default, the Apache web server sets the LimitRequestBody directive to 2GB [17]. This
is the allowed size of an HTTP request message body. If the SQL Injection is discovered in
a POST request, 2GB will give us enough room to upload our arbitrary code.
Web application firewalls also have the ability to terminate a long request. This long
request is normally detected as a buffer overflow attack.

相关文章推荐

magento PHP Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate xxxxx)

今天在magento1.9上给后台添加数据,根据客户要求添加数据(数据比较多,所以我写了一个脚本添加的,这不是重点),添加完数据以后,后台出现500错误,通过IE关闭友好提示,得到了详细的错误信息 P...
  • wu_ning
  • wu_ning
  • 2017年03月31日 22:18
  • 160

PHP脚本占用内存太多,Fatal Error: Allowed memory size of xxxxxx bytes exhausted

Fatal Error: Allowed memory size of xxxxxx bytes exhausted 今天遇到服务器很多自动任务的php脚本占用服务内存过多,并且程序不在运行了。 ...

php的Allowed memory size of 134217728 bytes exhausted问题

报错: PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 72 bytes)...

PHP的内存限制 Allowed memory size of 134217728 bytes exhausted (tried to allocate 1099 bytes) in

Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 1099 bytes) in    ...

ORA-01144: File size (string blocks) exceeds maximum of string blocks

今天我在扩展一个表空间的时候遭遇了这个错误,想知道具体原因是什么。 SQL> alter database datafile 5 resize 33G; alter database data...
  • jlds123
  • jlds123
  • 2011年09月13日 15:38
  • 3344

maximum data file size of Oracle Databa

What is the Maximum Datafile Size Limit In an Oracle Database? (文档 ID 804733.1) 转到底部 ...
  • loryliu
  • loryliu
  • 2015年12月28日 10:53
  • 397

consider increasing the maximum size of the cache

需要耐心啊,太急于求成,希望直接就得到解决方法了...以至于正确方法都已经出现了,我却没有耐心看下去,所以反而又耽误了不少时间.... 项目加载100+张图片,还有一个小的MP4,所以conso...

Why is the maximum size of the Java heap fixed?

Stack Exchange log in | careers | chat | meta | about | faq Stack Overfl...

c++ size of code

  • 2009年01月12日 13:03
  • 4KB
  • 下载

rounding to an arbitrary number of significant digits

转:http://stackoverflow.com/questions/202302/rounding-to-an-arbitrary-number-of-significant-digits Q...
  • javalfx
  • javalfx
  • 2015年09月09日 10:31
  • 465
内容举报
返回顶部
收藏助手
不良信息举报
您举报文章:Maximum size of arbitrary code allowed
举报原因:
原因补充:

(最多只允许输入30个字)