peter bassill · operator
$ cve CVE-2002-2295 JSON

CVE-2002-2295 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 6.7% (pctl 94)

Patch early

A public exploit exists.

Description

Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS6.69% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2002-12-31
Last modified2026-06-16

Affected (1)

VendorProduct
pico serverpico server

Public exploits

SourceTitleDate
exploit-dbPserv 2.0 - HTTP Version Specifier Buffer Overflow2002-11-30

References

→ the Explorer  ·  watch your stack  ·  NVD