CVE-2002-1907 TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.

MediumCVSS 5.0 EPSS 3.2% PoC

Published: 2005-06-28 07:00
Updated: 2026-06-17 01:00
Exploit status: Proof-of-concept only

Sign in for asset impact Search another CVE

Description

TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.

Affected products

Product	Affected versions	Fixed in
telcondex simplewebserver	= 2.06.20817	No fix listed

References

20021013 Long URL causes TelCondex SimpleWebServer to crash mailing-list
simplewebserver-long-url-dos(10367) patch vdb-entry
5961 exploit patch vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.20% (percentile 88.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

TelCondex SimpleWebserver 2.0.6 - Denial of Service PoC · Exploit Database (OffSec) · 2002-10-15