CVEvulnerability

CVE-2002-1870

7.5 HIGH Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution.

Affected configurations

• sws sws simple web server 0.0.3 • sws sws simple web server 0.0.4 • sws sws simple web server 0.1.0 • sws sws simple web server 0.1.1

References