CVE-2007-0548 KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects.

MediumCVSS 5.0 EPSS 3.3% PoC

Published: 2007-01-29 19:00
Updated: 2026-06-17 01:35
Exploit status: Proof-of-concept only

Description

KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects.

Affected products

Product	Affected versions	Fixed in
karjasoft sami http server	= 2.0.1	No fix listed

References

31623 vdb-entry
23901 third-party-advisory vendor-advisory
sami-http-request-dos(31690) vdb-entry
3182 exploit

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.34% (percentile 88.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Sami HTTP Server 2.0.1 - GET Denial of Service PoC · Exploit Database (OffSec) · 2010-11-05
Sami HTTP Server 2.0.1 - HTTP 404 Object not found Denial of Service PoC · Exploit Database (OffSec) · 2007-01-23