CVE-2004-2117: Tinyserver

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.

Affected products

• Tinyserver Tinyserver: version 1.1 only

Published 2004-01-24. Last modified 2026-06-16.