CVE-2004-1973: DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET requ...

Security readout for executives and security teams

CVE-2004-1973 is an availability issue in DiGi Web Server. A remote requester can send an unusually slash-heavy HTTP request that makes the server spend CPU translating path characters, potentially slowing or denying service. The source bundle does not identify affected versions or provide a modern severity score. Exposure appears limited to environments still running DiGi Web Server, especially if reachable from untrusted networks. The bundle lists affected vendor, product, and versions as n/a, so asset confirmation is necessary before assigning business impact. Prioritize if DiGi Web Server is internet-facing or supports a business-critical service. Otherwise, handle through legacy asset cleanup because the available evidence is old, incomplete, and limited to denial of service. Mitigation focus: Identify whether DiGi Web Server exists in current or legacy assets.; Check vendor or project release notes for fixed versions or retirement guidance.; Restrict untrusted network access to any remaining DiGi Web Server instances..

Prepared

Jun 29, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.