CVE-2002-1866

CVE-2002-1866 describes a denial-of-service vulnerability affecting Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The flaw stems from the server failing to close file descriptors when serving 404 error messages. An unauthenticated remote attacker can exploit this by repeatedly requesting non-existent pages, leading to file descriptor exhaustion and a denial of service. The CVSS v2 score is 5.0 (medium severity), indicating a network-based attack with low complexity and a partial impact on availability. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, though the vulnerability has garnered some community discussion on GitHub.