CVE-2021-26843

An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the dedotdot function may cause a Denial-of-Service daemon crash due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted...

PT-2017-11424 · Sthttpd · Thttpd

Name of the Vulnerable Software and Affected Versions: sthttpd versions prior to 2.27.1 Description: The issue is related to a Heap-based Buffer Overflow in the de dotdot function in libhttpd.c, which can be exploited by remote attackers using a crafted filename. This can cause a denial of servic...