Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.Referenceshttp://www.securityfocus.com/archive/1/165658http://www.securityfocus.com/bid/2432