high7.5Public exploit code
CVE-2002-1120
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Savant Web Server 3.1 - Remote Overflow (Metasploit)2010-10-04 · remote · windows · Verified
- Savant Web Server 3.1 - Remote Buffer Overflow (3)2009-12-14 · remote · windows · Verified
- Savant Web Server 3.1 - GET Universal Remote Overflow2007-08-12 · remote · windows · Verified
- Savant Web Server 3.1 - Remote Buffer Overflow (2)2005-08-30 · remote · windows · Verified
Impact
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Savant | Savant Web Server | through 3.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html
- http://www.iss.net/security_center/static/10076.php
- http://www.securityfocus.com/bid/5686
- https://www.exploit-db.com/exploits/16770/
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html
- http://www.iss.net/security_center/static/10076.php
- http://www.securityfocus.com/bid/5686
- https://www.exploit-db.com/exploits/16770/