CVE-2000-0898: Max Feoktistov Small HTTP Server

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.

Affected products

• Max Feoktistov Small HTTP Server: version 2.01 only

Published 2001-01-09. Last modified 2026-06-16.