CVE-2001-0493

The CVE describes a denial-of-service in Small HTTP Server 2.03 when handling HTTP requests that contain MS-DOS device names (for example AUX) in the URL. The underlying cause is improper handling of device-name paths, allowing a remote attacker to crash or freeze the server (Windows 98 reference...