CVE-2004-1973

DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.

• http://marc.info/?l=bugtraq&m=108311170018203&w=2
• http://secunia.com/advisories/11490Patch, Vendor Advisory
• http://securitytracker.com/alerts/2004/Apr/1009957.html
• http://sourceforge.net/project/shownotes.php?release_id=234261Patch
• http://www.autistici.org/fdonato/advisory/DiGiWwwServerC1-adv.txt
• http://www.osvdb.org/5702Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10228Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15987
• http://marc.info/?l=bugtraq&m=108311170018203&w=2
• http://secunia.com/advisories/11490Patch, Vendor Advisory
• http://securitytracker.com/alerts/2004/Apr/1009957.html
• http://sourceforge.net/project/shownotes.php?release_id=234261Patch
• http://www.autistici.org/fdonato/advisory/DiGiWwwServerC1-adv.txt
• http://www.osvdb.org/5702Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10228Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15987

Published

Apr 27, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1967Cross-site request forgery (CSRF) vulnerabilities in (1) cp_…8.8
• CVE-2004-1968The readmsg action in myhome.php in Open Bulletin Board (Ope…
• CVE-2004-1969The avatar upload capability in Open Bulletin Board (OpenBB)…
• CVE-2004-1970Samsung SmartEther SS6215S switch, and possibly other Samsun…
• CVE-2004-1971modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allo…
• CVE-2004-1972SQL injection vulnerability in modules.php in PHP-Nuke Video…
• CVE-2004-1974paFileDB 3.1 allows remote attackers to gain sensitive infor…
• CVE-2004-1975Cross-site scripting (XSS) vulnerability in the category mod…
• CVE-2004-1976SMC Barricade broadband router 7008ABR and 7004VBR enable re…
• CVE-2004-19773com NBX IP VOIP NetSet Configuration Manager allows remote …
• CVE-2004-1978Cross-site scripting (XSS) vulnerability in help.php in Mood…
• CVE-2004-1979Cross-site scripting (XSS) vulnerability in do_search.php in…