CVE-2002-1120
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
- Published
- Sep 12, 2002
- Updated
- Aug 8, 2024
- Assigning CNA
- mitre
- Evidence observed
- Aug 30, 2005
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:PHigh · next 30 days
- Percentile
- 99.3%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Sources
modules/exploits/windows/http/savant_31_overflow.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/http/savant_31_overflow.platform)
- verification: check_declared($.exploit_windows/http/savant_31_overflow.check)
- CVE-2002-1120Exploit
Classic stack-based buffer overflow in Savant Web Server 3.1 demonstrating early-2000s remote memory corruption through a crafted HTTP request.
basher13 · windows · Aug 30, 2005
Jacopo Cervini · windows · Aug 12, 2007
DouBle_Zer0 · windows · Dec 14, 2009
Metasploit · windows · Oct 4, 2010
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.