Approved changes feed: RSS · Atom
cpe:2.3:a:acme:thttpd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Acme (f9a29530-a981-5566-8a38-664c797d62c6) |
|---|---|
| Product | Thttpd (d8767620-a730-5c56-a8f4-8a00b901f592) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jpouellet/thttpd |
purl2cpe | 2026-06-01 10:12:31.779518 |
pkg:github/larryhe/tinyhttpd |
purl2cpe | 2026-06-01 10:12:31.779521 |
pkg:github/wlangstroth/thttpd |
purl2cpe | 2026-06-01 10:12:31.779524 |
pkg:rpm/fedora/thttpd |
purl2cpe | 2026-06-01 10:12:31.779527 |
pkg:rpm/opensuse/thttpd |
purl2cpe | 2026-06-01 10:12:31.779530 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-17663 |
vulnerable | 2026-06-03 14:36:55.684038 |
Details available
The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.
Published: 2018-02-06T17:00:00.000Z
Updated: 2024-08-05T20:59:17.603Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0899 |
vulnerable | 2026-06-03 14:26:26.820749 |
Details available
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.
Published: 2003-10-30T05:00:00.000Z
Updated: 2024-08-08T02:05:12.644Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1496 |
vulnerable | 2026-06-03 14:26:12.791501 |
Details available
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Published: 2005-06-21T04:00:00.000Z
Updated: 2024-08-08T04:58:11.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0892 |
vulnerable | 2026-06-03 14:26:02.442273 |
Details available
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:06.695Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.