CVE-2000-0897: Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly reque...

Security readout for executives and security teams

CVE-2000-0897 is an old availability issue in Small HTTP Server 2.03 and earlier. Repeated requests to a directory without an index.html file can consume memory that is not released, potentially exhausting the server and disrupting service. Exposure is likely limited to legacy systems still running Small HTTP Server 2.03 or earlier, especially if reachable from untrusted networks. The source bundle does not identify modern supported platforms or package names. Treat this as a legacy exposure cleanup item unless the service supports a critical business function. If internet-facing instances exist, prioritize isolation or replacement because the issue can affect availability remotely. Mitigation focus: Inventory and retire any Small HTTP Server 2.03 or earlier instances.; Check vendor or archived project guidance for fixed releases or replacement recommendations.; Restrict network access to any instance that cannot be immediately removed..

Prepared

Jul 1, 2026, 08:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.