CVE-2003-1364 Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection o...
HighCVSS 8.5
EPSS 7.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aprelium technologies abyss web server | = 1.1.2 | No fix listed |
References
- 20030405 Abyss X1 1.1.2 remote crash exploit mailing-list
- 7287 patch vdb-entry
- abyss-http-get-dos(11718) vdb-entry