Acme
Acme Thttpd: vulnerabilidades y CVE
Acme Thttpd tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-0158 | Crítica (9.8) | 1.3% | — | 27 dic 2019 | thttpd 2007 has buffer underflow. |
| CVE-2012-5640 | Media (5.5) | 0.39% | — | 25 nov 2019 | thttpd has a local DoS vulnerability via specially-crafted .htpasswd files |
| CVE-2017-17663 | Crítica (9.8) | 2.7% | — | 6 feb 2018 | The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution. |
| CVE-2013-0348 | Baja (2.1) | 0.52% | — | 13 dic 2013 | thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file. |
| CVE-2009-4491 | Crítica (9.8) | 14% | — | 13 ene 2010 | thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP… |
| CVE-2003-0899 | Crítica (9.8) | 22% | — | 3 nov 2003 | Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are… |
| CVE-2001-1496 | Crítica (9.8) | 4.8% | — | 31 dic 2001 | Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2001-0892 | Media (5) | 1.9% | — | 13 nov 2001 | Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /. |