Approved changes feed: RSS · Atom

cpe:2.3:a:thttpd:thttpd_http_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThttpd (d9853adc-5096-515e-9f88-b544cc3db0db)
ProductThttpd Http Server (932a5fbf-4139-5540-884b-a3ea7cd261ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/rssnsj/thttpd purl2cpe 2026-06-01 10:13:25.910205
pkg:rpm/fedora/thttpd purl2cpe 2026-06-01 10:13:25.910207
pkg:rpm/opensuse/thttpd purl2cpe 2026-06-01 10:13:25.910208

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4491 vulnerable 2026-06-08 04:51:48.646823 Details available
thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Published: 2010-01-13T00:00:00.000Z
Updated: 2024-08-07T07:01:20.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1457 vulnerable 2026-06-08 04:44:58.315924 Details available
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
Published: 2001-09-12T04:00:00.000Z
Updated: 2024-08-01T17:18:07.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1456 vulnerable 2026-06-08 04:44:58.315711 Details available
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-01T17:11:03.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.