CVE-2000-0897 Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consu...
MediumCVSS 5.0
EPSS 3.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| max feoktistov small http server | = 2.01 | No fix listed |
References
- home.lanck.net
- 20001114 Vulnerabilites in SmallHTTP Server mailing-list
- 1941 exploit patch vdb-entry vendor-advisory
- small-http-nofile-dos(5524) vdb-entry