Buffer overflow in zawhttpd 0.8.23 and possibly previous versions allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several \\\\ (backslash) characters.