Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Abyss Webfu服务器不完整HTTP请求远程拒绝服务攻击漏洞
Vulnerability Description
Abyss Web Server是一款免费的WEB服务程序，可使用在Windows和Linux操作系统上。 Abyss Web服务程序在处理部分不完整HTTP请求时存在问题，远程攻击者可以利用这个漏洞对服务程序进行拒绝服务攻击。 问题存在与当Abyss Web服务程序处理"Connection:"和"Range:"字段，由于Abyss接收到这些请求时，会读取每一个HTTP段，和每个段中的值，不但读取，而且与一些默认字符串进行对比操作，如"Connection:"字段会对比"close" 还是"Keep-A
CVSS Information
N/A
Vulnerability Type
N/A