CVE-1999-1456

Summary : CVE-1999-1456 affects the thttpd HTTP server (version 2.03 and earlier). A remote attacker can read arbitrary files by issuing a GET request where the filename has more than one leading slash (e.g., //path). Affected component : thttpd HTTP server (client request handling/path parsing)....

CVE-1999-1457

The CVE-1999-1457 issue affects the thttpd HTTP server prior to version 2.04-31. The vulnerability is a buffer overflow in the tdate_parse function triggered by a long date string, enabling remote attackers to execute arbitrary commands. Impact is described as allowing arbitrary command execution...