Page 2 of 15 results (0.002 seconds)

CVSS: 7.5EPSS: 9%CPEs: 1EXPL: 2

CVE-2002-0733 – ACME Labs thttpd 2.20 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2002-0733

12 Aug 2002 — Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message. Vulnerabilidad de secuencia de comandos en sitios cruzados en thttpd 2.20 y anteriores permite a atacantes remotos la ejecución arbitraria de rutinas mediante una URL a una página inexistente, lo cual provoca que thttpd inserte la rutina en un mensaje de error 404. • https://www.exploit-db.com/exploits/21422 •

CVSS: 9.8EPSS: 19%CPEs: 1EXPL: 0

CVE-2001-1496

https://notcve.org/view.php?id=CVE-2001-1496

31 Dec 2001 — Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. • http://www.securityfocus.com/archive/1/241310 • CWE-193: Off-by-one Error •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2001-0892

https://notcve.org/view.php?id=CVE-2001-0892

13 Nov 2001 — Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /. • http://marc.info/?l=bugtraq&m=100568999726036&w=2 • CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 1

CVE-2000-0900

https://notcve.org/view.php?id=CVE-2000-0900

19 Dec 2000 — Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:73.thttpd.asc •

CVSS: 10.0EPSS: 3%CPEs: 7EXPL: 0

CVE-2000-0359

https://notcve.org/view.php?id=CVE-2000-0359

12 Jul 2000 — Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. • http://archives.neohapsis.com/archives/bugtraq/1626.html •