CVE-2004-1973
DiGi Web Server - Denial of Service via Excessive Slash Characters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1973. PoCs published by Donato Ferrante.
AI-analyzed exploit summary This exploit demonstrates a denial of service vulnerability in DiGi WWW Server by sending a malformed HTTP GET request with an excessively long path, causing high CPU usage. The PoC is straightforward and relies on a simple HTTP request to trigger the vulnerability.
Description
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.
Exploits (1)
This exploit demonstrates a denial of service vulnerability in DiGi WWW Server by sending a malformed HTTP GET request with an excessively long path, causing high CPU usage. The PoC is straightforward and relies on a simple HTTP request to trigger the vulnerability.