Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2964. PoCs published by David Maciejak.
AI-analyzed exploit summary This NASL script exploits a denial-of-service vulnerability in F-Secure Policy Manager by sending a crafted request to the fsmsh.dll CGI module, causing the service to crash. It checks for vulnerable versions and triggers the DoS by querying a MS-DOS device name.
Description
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service (application crash) via NTFS reserved words in filenames in URLs.
Exploits (1)
This NASL script exploits a denial-of-service vulnerability in F-Secure Policy Manager by sending a crafted request to the fsmsh.dll CGI module, causing the service to crash. It checks for vulnerable versions and triggers the DoS by querying a MS-DOS device name.