VulnerabilityModified
CVE-2002-1866
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.
MEDIUM 5.0EPSS 1.57%
Does this matter?
Lower severity and a low EPSS score (1.57%). Track it; it rarely justifies an emergency change on its own.
Description
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.57% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- sws/sws simple web server
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html
- http://www.iss.net/security_center/static/10071.php
- http://www.securityfocus.com/bid/5659
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html
- http://www.iss.net/security_center/static/10071.php
- http://www.securityfocus.com/bid/5659
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.