HTTP: MS-DOS Device Name in URL
This signature detects HTTP requests ending in common MS-DOS device names. Some Web servers can attempt to access the phyiscal device, causing a denial of service.
Extended Description
Alt-N WorldClient 2.2.2 (Standard and Pro, Windows NT/2000 versions - included with versions of MDaemon email server prior to 3.5.6) can be crashed by requesting a DOS-Device name (eg., AUX, PRN, CON1, etc). A restart of the service is required to restore normal functioning.
Affected Products
Alt-n worldclient
Short Name
HTTP:EXPLOIT:MS-DOS-DEV
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2001-0583 Device MS-DOS Name URL bid:2478 in
Release Date
10/20/2006
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Alt-n
CVSS Score
5.0