CVE-2002-1062: T. Hauck Jana Web Server

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.

Affected products

  • T. Hauck Jana Web Server: version 1.0 only; version 1.45 only; version 1.46 only; version 2.0 only; version 2.0_beta1 only; version 2.0_beta2 only; …

Published 2002-10-04. Last modified 2026-06-16.