Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.

Exploit prediction (EPSS)

51.75% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

• EDB-16970 Kolibri HTTP Server 2.0 - HEAD Buffer Overflow (Metasploit) · remote · 2011-08-03
• EDB-16802 Webster HTTP Server - GET Buffer Overflow (Metasploit) · remote · 2010-11-03

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• seclists.org /lists/bugtraq/2002/Dec/0013.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
• securiteam.com /windowsntfocus/6R0030A6AY.html · x_refsource_MISC, x_transferred
• securityfocus.com /bid/6289 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/10727 · vdb-entry, x_refsource_XF, x_transferred

Sources

• CVE List: CVE-2002-2268
• NVD: CVE-2002-2268

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.