CVE-2002-2421 Information

Description

acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.

Reference

http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html http://www.iss.net/security_center/static/10190.php