1C239C43F521145Fa8385D64A9C32243

The issue allows remote attackers to cause a denial of service, resulting in the system hanging, by sending a malformed request to the NCP service. This can be achieved by sending a malformed FileSetLock request to port 524.

The issue affects confidentiality, integrity, and availability. It is related to the handling of null bytes in the `evaluation` parameter used in a filename, potentially allowing attackers to create a file with an executable extension and execute arbitrary JSP code via unknown vectors.