acme labs thttpd vulnerabilities and exploits

(subscribe to this query)

NA

Buffer overflow in Trivial HTTP (THTTPd) allows remote malicious users to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.

Acme Labs Thttpd 2.0.1 Acme Labs Thttpd 2.0.2 Acme Labs Thttpd 2.0.3 Acme Labs Thttpd 2.0.4 Acme Labs Thttpd 1.90a Acme Labs Thttpd 2.0 Acme Labs Thttpd 1.95

NA

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and previous versions allows remote malicious users to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.

Acme Labs Thttpd 2.16 Acme Labs Thttpd 2.17 Acme Labs Thttpd 2.18 Acme Labs Thttpd 2.19

NA

syslogtocern in Acme thttpd prior to 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.

Acme Labs Thttpd 2.21b Acme Labs Thttpd 2.23b1

NA

thttpd prior to 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote malicious users to read arbitrary files.

Acme Labs Thttpd

NA

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote malicious users to read arbitrary files via .. (dot dot) sequences in the Host: header.

Acme Labs Thttpd

NA

thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.

Acme Labs Thttpd 2.25b

NA

Cross-site scripting vulnerability in thttpd 2.20 and previous versions allows remote malicious users to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.

Acme Labs Thttpd 2.20b

1 EDB exploit

NA

Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote malicious users to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence ("%5C..") or (2) a drive letter (such as "C:&quo...

Acme Labs Thttpd 2.0.7 Beta 0.4

1 EDB exploit

NA

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-s...

Acme Labs Thttpd 2.25b

NA

Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a non-setu...

Acme Labs Thttpd 2.25b

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook