CVE-2007-2415

MEDIUM 5.0CVE-2007-2415 · Published 01/05/2007 · updated 16/06/2026

In short

CVE-2007-2415 is a MEDIUM (CVSS 5.0) vulnerability affecting pi3web web server (pi3web).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pi3web web server pi3web	`= 2.0.3_pl1`	No fix yet

Description

Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service (application exit) via a long URI. NOTE: this issue was originally reported as a crash, but the vendor states that the impact is a "clean" exit in which "the server I/O loop finishes and the process exits normally."

References

secunia.com/advisories/25009 · Patch
sourceforge.net/forum/forum.php
securityfocus.com/bid/23713
vupen.com/english/advisories/2007/1579 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33967

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free