This page lists publicly disclosed CVE vulnerabilities affecting max_feoktistov small_http_server (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2001-1251 | SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests. | [email protected] | 5.0 | 0.74% | 2001-06-29 | 2026-04-16 |
| CVE-2001-0493 | Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux. | [email protected] | 5.0 | 0.76% | 2001-06-27 | 2026-04-16 |
| CVE-2000-0899 | Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests. | [email protected] | 5.0 | 0.66% | 2001-01-09 | 2026-04-16 |
| CVE-2000-0898 | Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file. | [email protected] | 5.0 | 0.58% | 2001-01-09 | 2026-04-16 |
| CVE-2000-0897 | Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed. | [email protected] | 5.0 | 7.40% | 2001-01-09 | 2026-04-16 |
| CVE-2000-0484 | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service. | [email protected] | 5.0 | 6.23% | 2000-06-15 | 2026-04-16 |