Vulnerabilities > CVE-2002-0200 - Denial of Service vulnerability in Cyberstop Web Server MS-DOS Device

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
cyberstop
nessus

Summary

Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.

Vulnerable Configurations

Part Description Count
Application
Cyberstop
1

Nessus

NASL familyWeb Servers
NASL idHTTP_W98_DEVNAME_DOS.NASL
descriptionIt was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm, or AUX. An attacker could exploit this flaw to deny service to the affected system.
last seen2020-06-01
modified2020-06-02
plugin id10930
published2002-03-29
reporterThis script is Copyright (C) 2002-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10930
titleMultiple Web Server on Windows MS/DOS Device Request Remote DOS