An maintains a narrowly scoped web server product whose vulnerabilities frequently acquire public exploit code, reflecting the appeal of HTTP server implementations as targets for tooling development and adaptation. The recurring characterization as "Other" in vulnerability classification suggests that the product's exposure may span heterogeneous or implementation-specific flaw types rather than clustering around a canonical weakness class. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by An over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-1930HIGH Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username. | Dec 31, 2002 | 7.5 | 30 | NO | YES |
CVE-1999-0947HIGH AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. | Nov 2, 1999 | 7.5 | 29 | NO | YES |
CVE-2005-1086MEDIUM Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header. | May 2, 2005 | 6.4 | 27 | NO | YES |
CVE-2003-1271MEDIUM Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script. | Dec 31, 2003 | 4.3 | 27 | NO | YES |
CVE-2005-1087MEDIUM CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an inj | Apr 7, 2005 | 6.4 | 26 | NO | YES |
CVE-2006-1598HIGH AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the | Apr 3, 2006 | 7.8 | 20 | NO | NO |
CVE-2003-1269MEDIUM AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message. | Dec 31, 2003 | 5.0 | 20 | NO | NO |
CVE-2003-1270MEDIUM AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DO | Dec 31, 2003 | 5.0 | 20 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by An.
Media articles that mention a CVE ID that affects a product developed by An — matched by CVE ID, not by vendor name.