CVE-2004-2534
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.
- Score
- CVSS 2.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2004-12-31
- Last modified
- 2024-08-08
Affected products
References
- http://secunia.com/advisories/13268
- http://securitytracker.com/id?1012267
- http://users.pandora.be/bratax/advisories/b003.html
- http://www.osvdb.org/12101
- http://www.securityfocus.com/bid/11687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18192
