256 matches found
CVE-2005-3124
syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...
CVE-2005-3124: Undefined Security Weakness
syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...
thttpd symbolic links problem
syslogtocern script insecure temporary files creation...
[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...
DSA-883-1 thttpd - insecure temporary file
Bulletin has no description...
thttpd ssi file retrieval
The remote HTTP server allows an attacker to read arbitrary files on the remote web server, by employing a weakness in an included ssi package, by prepending pathnames with %2e%2e/ hex-encoded ../ to the pathname. Example: GET /cgi-bin/ssi//%2e%2e/%2e%2e/etc/passwd will return /etc/passwd...
thttpd Directory Traversal Vulnerability (CVE-2004-2628) - Windows
The remote web server is vulnerable to a path traversal vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2001-1496
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2001-1496
CVE-2001-1496 affects thttpd (Acme Labs) with an off-by-one buffer overflow in Basic Authentication across versions 1.95–2.20. The underlying issue is a buffer overflow in the Basic Auth handling, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Explo...
CVE-2001-1496: Off-by-one Error
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-2102
CVE-2004-2102 describes a cross‑site scripting (XSS) vulnerability in FREESCO 2.05 (a modified version of thttpd). The issue allows remote attackers to inject arbitrary web script or HTML via the test parameter. The connected sources confirm the affected product and parameter, and indicate the vu...
CVE-2004-2102
Cross-site scripting XSS vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter...
CVE-2004-2102: Undefined Security Weakness
Cross-site scripting XSS vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter...
CVE-2004-2628
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains 1 a hex-encoded backslash dot-dot sequence "%5C.." or 2 a drive letter such as "C:"...
Debian DSA-396-1 : thttpd - missing input sanitizing, wrong calculation
Several vulnerabilities have been discovered in thttpd, a tiny HTTP server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2002-1562: Information leak Marcus Breiing discovered that if thttpd it is used for virtual hosting, and an attacker suppli...
thttpd < 2.05 If-Modified-Since Header Remote Overflow
Binary data 1469.prm...