CVE-2002-0968
CVE-2002-0968 is a high-severity vulnerability in Analogx Simpleserver Www with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 6% (93rd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Analogx Simpleserver Www
- Published:
- Last modified:
Description
Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
Frequently asked questions
- What is CVE-2002-0968?
- Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
- How severe is CVE-2002-0968?
- CVE-2002-0968 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2002-0968 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 6% (93rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2002-0968?
- CVE-2002-0968 affects Analogx Simpleserver Www. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2002-0968?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2002-0968 published?
- CVE-2002-0968 was published on 2002-10-04 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0106.html
- http://marc.info/?l=bugtraq&m=102563702928443&w=2
- http://www.analogx.com/contents/download/network/sswww.htm
- http://www.iss.net/security_center/static/9338.php
- http://www.osvdb.org/3780
- http://www.securityfocus.com/bid/5006
Affected products (1)
- cpe:2.3:a:analogx:simpleserver_www:*:*:*:*:*:*:*:*
More vulnerabilities in Analogx Simpleserver Www
- CVE-2001-1586 — Critical (CVSS 10.0): Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary…
- CVE-2000-0473 — High (CVSS 7.5): Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET…
- CVE-2000-0011 — High (CVSS 7.5): Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET…
- CVE-2001-0386 — Medium (CVSS 5.0): AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux…
- CVE-2000-0664 — Medium (CVSS 5.0): AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot)…
- CVE-2000-0243 — Medium (CVSS 5.0): AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request…