NetSight
IP …
high7.8Public exploit code

CVE-2004-2534

Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.

Affected products

VendorProductAffected versions
FastreamNetfile Server
Versions 6.5.1.980, 6.5.1.981, 6.7.2.1085, 6.7.3, 6.7.5, 7.1

References