Intrusion Prevention

Mbedthis.AppWeb.HTTP.Server.Empty.Options.Request.DoS

Description

This indicates an attempt to exploit a denial of service vulnerability in Mbedthis AppWeb Server.
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1.

Affected Products

Mbedthis AppWeb 1.x

Impact

Denial of Services

Recommended Actions

Update to version 1.0.1.
http://www.mbedthis.com/downloads/appWeb/index.html

CVE References

CVE-2004-2316