PT-2001-1121 · Unknown · Small Http Server

Published 2001-01-09 · Updated 2016-10-18 · CVE-2000-0899

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Small HTTP Server version 2.01

Description The issue allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests, then closing the connection before the server responds to the requests.

Recommendations For version 2.01, consider restricting the number of concurrent connections to the server as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2000-0899

Affected Products

Small Http Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2000-0899 · Security Note
• http://securityfocus.com/bid/1942 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=97421834001092&w=2 · Note