vendor:
EServ
by:
Matthew Murphy
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: EServ
Affected Version From: 2.92
Affected Version To: 3
Patch Exists: YES
Related CWE: N/A
CPE: EServ
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 2000
2002
EServ Remote DoS Exploit
A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open connections are not properly freed when a connection no longer exists. This will result in a consumption of all available memory resources.
Mitigation:
Upgrade to the latest version of EServ.