CVE-2002-1816

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-193

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-10/0187.htmlBroken Link, Exploit, Vendor Advisory
http://secunia.com/advisories/7293Broken Link, Vendor Advisory
http://www.iss.net/security_center/static/10362.phpBroken Link
http://www.securityfocus.com/bid/5956Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2002-10/0187.htmlBroken Link, Exploit, Vendor Advisory
http://secunia.com/advisories/7293Broken Link, Vendor Advisory
http://www.iss.net/security_center/static/10362.phpBroken Link
http://www.securityfocus.com/bid/5956Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-18177.5Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-U CVE-2002-18185.0ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.CVE-2002-18196.4Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a ".." (dot dot) in the CVE-2002-18209.8register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker CVE-2002-18214.6Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct reque CVE-2002-18225.0IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is CVE-2002-18237.5Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP re CVE-2002-18245.0Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not pr CVE-2002-18256.4Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary CVE-2002-18264.6grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/k CVE-2002-18272.1Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) CVE-2002-18285.0Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length val