CVE-2002-2421

HIGH CVSS: 7.8 Published: 2002-12-31 Modified: 2026-06-16

Description

acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.

Affected Platforms

Andrey Cherezov Acweb

Weakness Type

CWE-20

References