CVE-2002-1816

Critical

Published: 31/12/2002(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

An off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially gaining control over the server and access to sensitive data.

Recommendation

It is recommended to upgrade to a newer version of ATPhttpd that addresses this vulnerability and to monitor server logs for potential attack attempts.

Original NVD description (English source)

Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.