CVE-2002-0733

Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message...

ACME Labs thttpd 2.20 - Cross-Site Scripting

ACME Labs thttpd 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported...

ACME Labs thttpd 2.20 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported in some versions of thttpd. thttpd fails to...

Smalls holes on 5 products #1

Products : - THTTPD v2.20b - Sgdynamo - Myannuaire v1.0 - phpAnyvote v1.0 - DiSi-Poll 0.9.0 More details in french : http://www.ifrance.com/kitetoua/tuto/5holes1.txt translated by google : http://translate.google.com/translate?u=http3A 2F2Fwww.ifrance.com2Fkitetoua2Ftuto...

CVE-1999-1456

Summary : CVE-1999-1456 affects the thttpd HTTP server (version 2.03 and earlier). A remote attacker can read arbitrary files by issuing a GET request where the filename has more than one leading slash (e.g., //path). Affected component : thttpd HTTP server (client request handling/path parsing)....

CVE-1999-1456

thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / slash character in the filename...

thttpd : Cross Site Scripting.

http://THTTPDHOST/scriptANYSCRIPT/script Version : thttpd/2.20b 10oct00 and maybe others... http://www.acme.com/software/thttpd/ If anyone know another version who's vulnerable, mail me please... Sorry for my bad english. frog-m@n...

Межсайтовый скриптинг в ACME thttpd (crossite scripting)

No description provided...

CVE-2001-0892

Vulnerability : Acme Thttpd Secure Webserver prior to 2.22, with the chroot option enabled, is exposed to remote access that can view sensitive files under the document root (e.g., .htpasswd) via a GET request with a trailing slash. Affected product : Acme Thttpd Secure Webserver (before 2.22). R...

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

PT-2001-2581 · Thttpd · Thttpd

Name of the Vulnerable Software and Affected Versions: thttpd versions 1.95 through 2.20 Description: The issue is an off-by-one buffer overflow in Basic Authentication, allowing remote attackers to cause a denial of service and possibly execute arbitrary code. Recommendations: For versions 1.95...

Переполнение буфера в thttpd (buffer overflow)

Переполнение буфера при base64-декодировании заголовка HTTP-авторизации...

Off-by-one overflow discovered in thttpd!!1

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! OFF-BY-ONE OVERFLOW IN THTTPD! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ include...

Несанкционированный доступ к файлам через Thttpd/Mini_httpd (protection bypass, directory traversal)

Добавив / к имени файла можно получить доступ к файлу паролей или к любому файлу защищенном через .htpasswd...

Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln

Hello, The vendor has already sent out notices and the patches can be found on the vendors homepage listed below. - [email protected] Cgi Security Advisory 6 [email protected] Thttpd and MiniHttpd Webserver Permission Bypass Found November 2001 Public Release November 2001 Vendor Contacted...

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-1999-1457

The CVE-1999-1457 issue affects the thttpd HTTP server prior to version 2.04-31. The vulnerability is a buffer overflow in the tdate_parse function triggered by a long date string, enabling remote attackers to execute arbitrary commands. Impact is described as allowing arbitrary command execution...

CVE-1999-1457

Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdateparse function...

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. dot dot attack...

CVE-2000-0900

Summary: CVE-2000-0900 affects thttpd’s built-in ssi CGI when used with versions 2.19 and earlier. A remote attacker can exploit a directory traversal flaw by using encoded path sequences (e.g., %2e%2e) to read arbitrary files via the ssi handler. The issue is identical to an encoded traversal vu...