Acme thttpd 1.92.0.x - CGI Test Script Cross-Site Scripting

Acme thttpd 1.92.0.x - CGI Test Script Cross-Site Scripting source: https://www.securityfocus.com/bid/9474/info thttpd is prone to a cross-site scripting vulnerability in the CGI test script. This could permit a remote attacker to create a malicious link to the web server that includes hostile HT...

CVE-2003-0899

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "" and "" sequences...

tHTTPd directory traversal

If virtual hosts are usid it's possible to traverse directories with ../ in Host: header...

[UNIX] tHTTPd Virtual Hosting Security Hole (Host: ../..)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-0899

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "" and "" sequences...

CVE-2003-0899

CVE-2003-0899 describes a buffer overflow in thttpd (defang in libhttpd.c) affecting versions 2.21 to 2.23b1. The overflow can be triggered by requests containing ‘’ that are expanded to “”, enabling remote code execution. Connected sources (SUSE, Debian, OpenVAS, and NVD listing) confirm the vul...

PT-2003-1946 · Thttpd · Thttpd

Name of the Vulnerable Software and Affected Versions: thttpd versions 2.21 through 2.23b1 Description: A buffer overflow issue exists in the defang function within libhttpd.c, allowing remote attackers to execute arbitrary code. This occurs when requests containing '' characters are processed,...

CVE-2003-0899: Incorrect Calculation of Buffer Size

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "" sequences...

[SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 396-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 396-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2003 http://www.debian.org/security/faq -...

DSA-396 thttpd - missing input sanitizing, wrong calculation

Bulletin has no description...

thttpd buffer overflow

Buffer overflow during characters escaping...

Remote overflow in thttpd

----------------------------------------------------------------------- Texonet Security Advisory 20030908 ----------------------------------------------------------------------- Advisory ID : TEXONET-20030908 Authors : Joel Soderberg and Christer Oberg Issue date : Monday, September 8, 2003...

thttpd 2.2x - defang Remote Buffer Overflow

thttpd 2.2x - defang Remote Buffer Overflow // source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software...

thttpd 2.2x - defang Remote Buffer Overflow (PoC)

thttpd 2.2x - defang Remote Buffer Overflow PoC / source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by...

thttpd 2.2x - 'defang' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition. Th...

thttpd 2.2x - 'defang' Remote Buffer Overflow (PoC)

/ source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition. The...

CVE-2002-1562

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. dot dot sequences in the Host: header...

thttpd Host Header Traversal Arbitrary File Access

The remote HTTP server allows anyone to browse the files on the remote host by sending HTTP requests with a Host: field set to '../../'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11576; scriptversion "1.18"; scriptcveid"CVE-2002-1562", "CVE-2003-0899";...

CVE-2002-1562

The CVE-2002-1562 entry affects thttpd in virtual-hosting mode, where a remote attacker can read arbitrary files by injecting a path into the Host header (directory traversal). Related advisories (CAN-2002-1562 and CAN-2003-0899) describe an information leak and remote code execution via a crafte...