CVE-2011-2900

CVE-2011-2900 is a stack-based buffer overflow in the HTTP PUT handling paths of Mongoose 3.0, yaSSL Embedded Web Server (yasslEWS) 0.2, and Simple HTTPD (shttpd) 1.42, allowing remote code execution. The root cause is a vulnerable put_dir/ _shttpd_put_dir path in mongoose.c, yasslEWS.c, and io_d...

CVE-2009-4535

The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...