Secunia

NOTE: Based on information from the vendor and internal testing, it was NOT possible to confirm the alleged vulnerability. This advisory has therefore been revoked.

R00tCr4ck has reported a vulnerability in Abyss Web Server for Windows, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the handling of reserved MS-DOS device names. This can be exploited to crash a vulnerable web server by sending a specially crafted HTTP request containing a reserved MS-DOS device name.

The vulnerability has been reported in version X1. Other versions may also be affected.

Solution
Filter requests containing reserved MS-DOS device names.

Provided and/or discovered by
R00tCr4ck

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area