CVE-2002-1549 Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

HighCVSS 7.5 EPSS 11.2% Public exploit

Published: 2004-09-01 07:00
Updated: 2026-06-17 00:59
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Affected products

Product	Affected versions	Fixed in
light httpd	= 0.1	No fix listed

References

20021112 Remote Buffer Overflow vulnerability in Light HTTPd exploit mailing-list vendor-advisory
light-httpd-bo(10607) vdb-entry vendor-advisory
6162 exploit patch vdb-entry vendor-advisory

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 11.17% (percentile 96.0)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Light HTTPd 0.1 (Windows) - Remote Buffer Overflow Exploit · Exploit Database (OffSec) · 2013-04-25
Light HTTPd 0.1 - 'GET' Buffer Overflow (1) Exploit · Exploit Database (OffSec) · 2002-11-12
Light HTTPd 0.1 - 'GET' Buffer Overflow (2) Exploit · Exploit Database (OffSec) · 2002-11-12