Thttpd - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2019-11-25.

Products

• Thttpd Http Server - 3 CVEs
• Thttpd - 1 CVEs

Newest CVEs of Thttpd

• CVE-2012-5640 - CVSS 5.5 (medium), 2019-11-25: thttpd has a local DoS vulnerability via specially-crafted .htpasswd files
• CVE-2009-4491 - CVSS 9.8 (critical), 2010-01-13: thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or…
• CVE-1999-1456 - CVSS 5 (medium), 1999-12-31: thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the…
• CVE-1999-1457 - CVSS 7.5 (high), 1999-11-16: Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly…