bratax has reported a vulnerability in Fastream NETFile FTP/Web Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the "Keep-Alive" connection timeout handling. The problem is that the web server doesn't close connections to clients when receiving HTTP HEAD requests.

This can be exploited to consume all available connections and prevent further connections from being established by sending multiple HTTP HEAD requests.

The vulnerability has been reported in version 7.12. Prior versions may also be affected.

Solution
Update to version 7.1.3.
Further details available in Customer Area

Provided and/or discovered by
bratax

Original Advisory
http://users.pandora.be/bratax/advisories/b003.html

Deep Links
Links available in Customer Area