CVE-2017-17663

The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-06

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Mini Httpd (Acme)
• Thttpd (Acme)

References

• http://acme.com/updates/archive/199.html