CVE-2001-0616 Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
MediumCVSS 5.0
EPSS 7.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| faust informatics freestyle chat | <= 4.1 | No fix listed |
References
- 20010525 Advisory for Freestyle Chat server exploit mailing-list patch vendor-advisory
- 2777 exploit patch vdb-entry vendor-advisory
- freestyle-chat-device-dos(6602) vdb-entry