Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2002-1904

Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Published: Dec 31, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-1904
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
gaztek / ghttpd	1.4.1	1.4.1.x
gaztek / ghttpd	1.4	1.4.x
gaztek / ghttpd	1.4.3	1.4.3.x
gaztek / ghttpd	1.4.2	1.4.2.x

http://lynorics.sundawn.net/prog/ghttpd.html#versionen
http://online.securityfocus.com/archive/1/295141
http://www.iss.net/security_center/static/10361.php
http://www.securityfocus.com/bid/5960

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo