Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Oct 11, 2002· Updated Apr 16, 2026

CVE-2002-1166

CVE-2002-1166

Description

Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request.

Affected products

17

John Franks/Wn Server17 versions
cpe:2.3:a:john_franks:wn_server:1.18.2:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:john_franks:wn_server:1.18.2:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.18.3:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.18.4:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.18.5:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.18.6:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.18.7:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.0:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.1:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.2:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.3:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.4:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.5:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.6:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.7:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.8:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:1.19.9:*:*:*:*:*:*:*
- cpe:2.3:a:john_franks:wn_server:2.0.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

www.iss.net/security_center/static/10223.phpnvdVendor Advisory
archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.htmlnvd
marc.infonvd
www.osvdb.org/9836nvd
www.securityfocus.com/bid/5831nvd

News mentions

0

No linked articles in our index yet.