CVE-2002-1865 - CVE House
Back to Database
Status published Medium CVE-2002-1865

Buffer overflow in the Embedded HTTP server, as used in...

Vulnerability Description

Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1865

Credits & Attribution

No credits recorded in the NVD database.

References

More from d-link

View All →
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated...
Unknown 0
CVE-2022-44928
D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection...
Unknown 0
CVE-2021-33259
Several web interfaces in D-Link DIR-868LW 1.12b have no authentication...
Medium 5.3
CVE-2021-26709
D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based...
Critical 9.8
CVE-2020-9544
An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices....
High 7.5

Affected Vendor

Affected Software

di-804, dl-704, befw11s4, wap11
Vulnerable Versions:
4.68, 2.56_b5, 2.56_b6, 1.4.2.7, 1.37.2, 1.37.2b, 1.37.9b, 1.40.3, 1.42.7, 1.3, 1.4

Timeline

Official Publish: June 28th, 2005
Last Modified: September 17th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.