CVE-2004-2628

Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains 1 a hex-encoded backslash dot-dot sequence "%5C.." or 2 a drive letter such as "C:"...

Debian DSA-396-1 : thttpd - missing input sanitizing, wrong calculation

Several vulnerabilities have been discovered in thttpd, a tiny HTTP server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2002-1562: Information leak Marcus Breiing discovered that if thttpd it is used for virtual hosting, and an attacker suppli...

thttpd < 2.05 If-Modified-Since Header Remote Overflow

Binary data 1469.prm...

thttpd < 2.20 ssi Servlet Traversal File Access

Binary data 1468.prm...

thttpd < 2.05 If-Modified-Since Header Overflow

Binary data 1522.prm...

thttpd < 2.20 Arbitrary World-Readable File Disclosure

Binary data 2120.prm...

thttpd < 2.24 Host:' Header Traversal File Access / libhttpd.c defang Overflow

Binary data 1550.prm...

thttpd < 2.21 Error Page XSS

Binary data 2123.prm...

THTTPD/Mini_HTTPD < 2.22 File Disclosure

Binary data 2121.prm...

THTTPD/Mini_HTTPD < 1.16 File Disclosure

Binary data 2122.prm...

thttpd/mini_httpd < 2.24 Virtual Hosting File Disclosure

Binary data 2125.prm...

thttpd CGI Test Script XSS

Binary data 2126.prm...

thttpd 2.0.7 Directory Traversal (Windows)

The remote web server fails to limit requests to items within the document directory. An attacker may exploit this flaw to read arbitrary files on the remote system with the privileges of the http process. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14229;...

thttp207.txt

Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICEChina.com ================ Content: in libhttpd.c: int httpdparserequest httpdconn hc ... if hc-decodedurl0 ...

Acme thttpd 2.0.7 - Directory Traversal

Acme thttpd 2.0.7 - Directory Traversal source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows...

thttpd for Windows directory traversal

Directory traversal by using backslash...

[Full-Disclosure] Bug@thttpd

Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICEChina.com ================ Content: in libhttpd.c: int httpdparserequest httpdconn hc ... if hc-decodedurl0 ...

SuSE-SA:2003:044: thttpd

The remote host is missing the patch for the advisory SuSE-SA:2003:044 thttpd. Two vulnerabilities were found in the 'tiny' web-server thttpd. The first bug is a buffer overflow that can be exploited remotely to overwrite the EBP register of the stack. Due to memory-alignment of the stack done by...

freesco.txt

Software: FREESCO public http server - Running thttpd/2.05 09nov99 Vendor: http://www.freesco.org Versions: 2.05 Platforms: Unix Bug: Cross Site Scripting Vulnerabillity Risk: Low Exploitation: Remote with browser Date: 22 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

FREESCO public http server - Cross Site Scripting Vulnerabillity

Software: FREESCO public http server - Running thttpd/2.05 09nov99 Vendor: http://www.freesco.org Versions: 2.05 Platforms: Unix Bug: Cross Site Scripting Vulnerabillity Risk: Low Exploitation: Remote with browser Date: 22 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...