CVE-2002-2421

Description

acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.

Affected products

• andrey_cherezov / acweb1.14 – 1.14

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html
• MISChttp://www.iss.net/security_center/static/10190.php