Fastream NETFile FTP/Web Server HEAD Request Saturation DoS
Medium Nessus Plugin ID 15764
SynopsisThe remote web server is prone to a denial of service attack.
DescriptionThe remote host appears to be running FastStream NETFile Server version 7.1 or older. These versions do not close the connection when an HTTP HEAD request is received with the keep-alive option set. An attacker may exploit this flaw by sending multiple HEAD requests to the remote host, thus consuming all its file descriptors until it does not accept connections any more.
SolutionUpgrade to version 7.1.3 or later.