TH
Product
Thttpd
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 0Medium 1Low 0
Watch
Add Thttpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0158 | 9.8 | Dec 27 | thttpd 2007 has buffer underflow Affected: 2007 |
| CVE-2017-17663 | 9.8 | Feb 6 | The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution Affected: before 2.28 |
| CVE-2009-4491 | 9.8 | Jan 13 | thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary… Affected: 2.25 |
| CVE-2003-0899 | 9.8 | Nov 3 | Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger… Affected: 2.21 before 2.23; 2.23; 2.23 |
| CVE-2001-1496 | 9.8 | Dec 31 | Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code Affected: 1.95 through 2.20 |
| CVE-2012-5640 | 5.5 | Nov 25 | thttpd has a local DoS vulnerability via specially-crafted .htpasswd files Affected: All versions, or not specified |
| CVE-2013-0348 | – | Dec 13 | thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading… Affected: 2.25 |
| CVE-2001-0892 | – | Nov 13 | Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET… Affected: through 2.22 |
Showing 8