Skip to content

CVE-2002-1120

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary...

7.5 HighPublic exploit

CVE-2002-1120 is a high vulnerability (CVSS 7.5) in Savant Web Server, published September 12, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 66.6%, the 99th percentile. No source names a fixed version.

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Exploit likelihood

66.6%Down 7.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record: CVE-2002-1120
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record: CVE-2002-1120
Updated: 2026-11-02

EUVDEUVD-2002-1108 No score

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record: EUVD-2002-1108
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g2w9-h4g2-cm76 No score

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary...

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record: GHSA-g2w9-h4g2-cm76
Updated: 2026-11-02

Affected products

savant web server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Savant Web Server 3.1 - Remote Buffer Overflow (3)	2009-12-14
Exploit-DB	Savant Web Server 3.1 - Remote Buffer Overflow (2)	2005-08-30
Exploit-DB	Savant Web Server 3.1 - Remote Overflow (Metasploit)	2010-10-04
Exploit-DB	Savant Web Server 3.1 - GET Universal Remote Overflow	2007-08-12
Metasploit	Savant 3.1 Web Server Overflow	2002-09-10
PoC in GitHub	TheMalwareGuardian/CVE-2002-1120	2026-03-19

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub

References