CVE-2002-1866 : Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow re

Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.

Published 2002-12-31 05:00:00

Updated 2008-09-05 20:31:43

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2002-1866

EPSS FAQ

0.43%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1866

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

Products affected by CVE-2002-1866

SWS » Sws Simple Web Server » Version: 0.1.1
cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*
Matching versions
SWS » Sws Simple Web Server » Version: 0.0.3
cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*
Matching versions
SWS » Sws Simple Web Server » Version: 0.1.0
cpe:2.3:a:sws:sws_simple_web_server:0.1.0:*:*:*:*:*:*:*
Matching versions
SWS » Sws Simple Web Server » Version: 0.0.4
cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2002-1866

Exploit prediction scoring system (EPSS) score for CVE-2002-1866

CVSS scores for CVE-2002-1866

References for CVE-2002-1866

Products affected by CVE-2002-1866