CVE-2002-2295

CVE-2002-2295 describes a critical buffer overflow vulnerability in Pico Server (pServ) versions 2.0 beta 1 through beta 5. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code through various crafted inputs, including a 1024-byte TCP stream message, long HTTP method names, version numbers, User-Agent headers, or file paths. The vulnerability has a CVSS score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity, requiring no authentication, and potentially leading to partial confidentiality, integrity, and availability impacts. Its FAUCET Risk Score is 97/100, highlighting its significant risk. While not currently on the CISA KEV catalog, an exploit for a specific variant (HTTP Version Specifier Buffer Overflow) is available on ExploitDB. The CVE has garnered significant community attention with 10 mentions, suggesting active discussion, despite no known Metasploit or Nuclei modules and no media coverage.