Every CVESearch/Get API key

CVE-2007-2367

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers...

10.0 HighPublic exploit

CVE-2007-2367 is a high vulnerability (CVSS 10.0) in Wserve Http Server Http Server, published April 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.74%, the 90th percentile. No source names a fixed version.

Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
3.74%EPSS, 90th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.

Exploit likelihood

3.74%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBWserve HTTP Server 4.6 - Long Directory Name Denial of Service2007-04-05

What each source reports

NVD Score used10.0

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.

Record
CVE-2007-2367
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.

Record
CVE-2007-2367
Updated
2026-11-02
EUVDEUVD-2007-2362No score

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.

Record
EUVD-2007-2362
Updated
2026-11-03
GitHub AdvisoriesGHSA-x894-663w-mqmwNo score

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers...

Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.

Record
GHSA-x894-663w-mqmw
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open