CVEvulnerability

CVE-2004-2534

7.8 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.

Affected configurations

• fastream netfile server 6.5.1.980 • fastream netfile server 6.5.1.981 • fastream netfile server 6.7.2.1085 • fastream netfile server 6.7.3 • fastream netfile server 6.7.5 • fastream netfile server 7.1 • fastream netfile server 7.1.2

References