CVE-2017-10671: Out-of-bounds Write

Heap-based Buffer Overflow in the dedotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via a crafted filename...

sthttpd 'de_dotdot' function heap buffer overflow vulnerability

sthttpd is a lightweight HTTP server that supports URL-based file traffic limiting as well as support for multiple platforms such as FreeBSD, SunOS, Solaris, BSD, etc. sthttpd is an improved version of thttpd that includes an embedding feature that enables the development of web servers for...

CVE-2013-0348

CVE-2013-0348 affects thttpd/thttpd-derived sthttpd: versions prior to 2.26.4-r2 and 2.25b expose a world-readable /var/log/thttpd.log. The root cause is incorrect file permissions, permitting local users to read sensitive information from the log file. Implication: local information disclosure w...

PT-2013-2247

Name of the Vulnerable Software and Affected Versions sthttpd versions prior to 2.26.4-r2 thttpd version 2.25b Description The issue allows local users to obtain sensitive information by reading the /var/log/thttpd.log file due to world-readable permissions. Recommendations For sthttpd versions...