Approved changes feed: RSS · Atom

cpe:2.3:a:acme:thttpd:2.23:-:*:*:*:*:*:*

part: a version: 2.23 update: -

VendorAcme (f9a29530-a981-5566-8a38-664c797d62c6)
ProductThttpd (d8767620-a730-5c56-a8f4-8a00b901f592)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jpouellet/thttpd purl2cpe 2026-06-01 10:12:31.779734
pkg:github/larryhe/tinyhttpd purl2cpe 2026-06-01 10:12:31.779735
pkg:github/wlangstroth/thttpd purl2cpe 2026-06-01 10:12:31.779736
pkg:rpm/fedora/thttpd purl2cpe 2026-06-01 10:12:31.779738
pkg:rpm/opensuse/thttpd purl2cpe 2026-06-01 10:12:31.779739

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0899 vulnerable 2026-06-03 14:26:26.821311 Details available
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "&lt;" and "&gt;" sequences.
Published: 2003-10-30T05:00:00.000Z
Updated: 2024-08-08T02:05:12.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.