CVE-2001-0493

The CVE describes a denial-of-service in Small HTTP Server 2.03 when handling HTTP requests that contain MS-DOS device names (for example AUX) in the URL. The underlying cause is improper handling of device-name paths, allowing a remote attacker to crash or freeze the server (Windows 98 reference...

CVE-2000-0897

CVE-2000-0897 affects Small HTTP Server 2.03 and earlier. The issue allows remote attackers to trigger a denial of service by repeatedly requesting a URL that references a directory lacking an index.html, causing memory to be consumed without release after the request completes. The available doc...