CVE-2004-2534: Fastream Netfile Server

High severity, CVSS 7.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.

Affected products

• Fastream Netfile Server: version 6.5.1.980 only; version 6.5.1.981 only; version 6.7.2.1085 only; version 6.7.3 only; version 6.7.5 only; version 7.1 only; …

Published 2004-12-31. Last modified 2026-06-16.