CVE-2002-1866

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.

Affected (4)

Products: Sws: Sws Simple Web Server

Sws

1 product

Sws Simple Web Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sws Sws Simple Web Server	Version 0.0.3
Sws Sws Simple Web Server	Version 0.0.4
Sws Sws Simple Web Server	Version 0.1.0
Sws Sws Simple Web Server	Version 0.1.1

References (6)

http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html

Source: cve@mitre.org

http://www.iss.net/security_center/static/10071.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/5659

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10071.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5659

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.