vendor:
Web Server
by:
SecurityFocus
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Web Server
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
Savant Web Server Denial of Service Vulnerabilities
Savant web server has been reported prone to multiple denial of service vulnerabilities. Reportedly, a remote attacker may invoke many HTTP requests in succession, against the Savant web server and cause the service to fail. Additionally a remote attacker may make a HTTP request of excessive length. This will also reportedly cause the service to fail.
Mitigation:
Ensure that the web server is configured to limit the number of requests that can be made in a given period of time, and to limit the length of requests.