Fastream NetFile FTP/Web服务器头请求服务拒绝漏洞

漏洞信息详情

Fastream NetFile FTP/Web服务器头请求服务拒绝漏洞

CNNVD编号：CNNVD-200412-847
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2004-2534
漏洞类型：授权问题
发布时间： 2004-12-31
威胁类型：远程
更新时间： 2006-01-24
厂商： fastream
漏洞来源： Discovery of this ...

漏洞简介

Fastream NETFile服务器 7.1.2不能正确处理保持激活连接超时的情况并且不能在头请求后关闭连接。远程攻击者通过发送大量HTTP头请求导致服务拒绝（连接消耗）。

漏洞公告

It is reported that this vulnerability is addressed in Fastream NETFile FTP/Web Server 7.1.3 Professional. This is not confirmed. Customers are advised to contact the vendor in regards to obtaining and applying appropriate updates. Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .

参考网址

来源: SECUNIA 名称: 13268 链接:http://secunia.com/advisories/13268 来源: XF 名称: fastream-head-request-dos(18192) 链接:http://xforce.iss.net/xforce/xfdb/18192 来源: BID 名称: 11687 链接:http://www.securityfocus.com/bid/11687 来源: OSVDB 名称: 12101 链接:http://www.osvdb.org/12101 来源: users.pandora.be 链接:http://users.pandora.be/bratax/advisories/b003.html 来源: SECTRACK 名称: 1012267 链接:http://securitytracker.com/id?1012267

受影响实体

Fastream Netfile_server:7.1.2:Professional
Fastream Netfile_server:7.1.2
Fastream Netfile_server:7.1
Fastream Netfile_server:6.7.5
Fastream Netfile_server:6.7.3

补丁

暂无

正文

Fastream NetFile FTP/Web服务器头请求服务拒绝漏洞

漏洞信息详情