CVE-2002-1866: Sws Simple Web Server

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.

Affected products

• Sws Sws Simple Web Server: version 0.0.3 only; version 0.0.4 only; version 0.1.0 only; version 0.1.1 only

Published 2002-12-31. Last modified 2026-06-16.