Netscape FastTrak Server Cache Module DoS Vulnerability

Netscape FastTrak Server is a Web server designed for small workgroups.

Netscape FastTrak Server is subject to a denial of service. The cache module within Netscape FastTrak Server contains nonexistent, yet legitimate, URLs. This cached information is kept for approximately thirty minutes. If nonexistent URLs are continuously requested, Netscape FastTrak Server will consume all available memory, causing the server to exhibit diminished performance and, potentially, to stop responding entirely. A restart of the service is required in order to gain normal functionality.

Successful exploitation of this vulnerability could assist in further attacks against the victim host.

There are no vendor supplied patches available at this time. Check the Netscape Download Page for information on new versions.