$ cve CVE-2002-1549 JSON

CVE-2002-1549 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 11.2% (pctl 96)

Patch early

A public exploit exists.

Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	11.17% — more likely to be exploited than 96% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2003-03-31
Last modified	2026-06-16

Vendor	Product
light httpd	light httpd

Source	Title	Date
exploit-db	Light HTTPd 0.1 (Windows) - Remote Buffer Overflow	2013-04-25
exploit-db	Light HTTPd 0.1 - 'GET' Buffer Overflow (1)	2002-11-12
exploit-db	Light HTTPd 0.1 - 'GET' Buffer Overflow (2)	2002-11-12