thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection

thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit...

thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. This issue...

Thecus NAS Device Detection

According to its web server, the remote host is a Thecus NAS Network- Attached Storage device, which provides file-based data storage to hosts across a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35820; scriptversion"1.12"; scriptnameenglish:"Thecus NAS...

thttpd/mini_httpd < 2.24 Virtual Hosting File Disclosure

Binary data 2125.prm...

THTTPD/Mini_HTTPD < 1.16 File Disclosure

Binary data 2122.prm...

CVE-2001-0893

Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-2001-0893

Acme mini_httpd before 1.16 is affected. A remote attacker can view sensitive files under the document root (e.g., .htpasswd) by issuing a GET request with a trailing /. Root cause is not more detailed in the provided documents. The impact is exposure of confidential data on the server; exploitat...

Несанкционированный доступ к файлам через Thttpd/Mini_httpd &#40;protection bypass, directory traversal&#41;

Добавив / к имени файла можно получить доступ к файлу паролей или к любому файлу защищенном через .htpasswd...

Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln

Hello, The vendor has already sent out notices and the patches can be found on the vendors homepage listed below. - [email protected] Cgi Security Advisory 6 [email protected] Thttpd and MiniHttpd Webserver Permission Bypass Found November 2001 Public Release November 2001 Vendor Contacted...

CVE-2001-0893

Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...