Published: 03/11/2003 Updated: 14/02/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote malicious users to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.

Vulnerable Product	Search on Vulmon	Subscribe to Product
acme thttpd 2.23
acme thttpd

/* source: wwwsecurityfocuscom/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition The problem is reported to exist in the defang() functi ...

source: wwwsecurityfocuscom/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition The problem is reported to exist in the defang() function ...

Unic P1+ micro projector firmware packing tool

Unic P1+ Firmware tool Short writeup of my experiences with the Unic P1+'s firmware (Unfortuntaly I broke the device, please read carefully if you want to try this on your own Also if you have any Idea how to fix a botched nand, please get in touch) Okay, the story is simple, there is this cute, tiny Wifi projector, the Unic P1+ It could have been such a great device

CWE-131 http://www.securityfocus.com/bid/8906 http://www.texonet.com/advisories/TEXONET-20030908.txt http://www.osvdb.org/2729 http://secunia.com/advisories/10092 http://marc.info/?l=bugtraq&m=106729188224252&w=2 https://www.debian.org/security/2003/dsa-396 https://exchange.xforce.ibmcloud.com/vulnerabilities/13530 https://nvd.nist.gov https://github.com/meinlebenswerk/UnicP1Plus_fwtool https://www.exploit-db.com/exploits/23305/

CVE-2003-0899

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect