TinyHTTPD Input Validation Vulnerability
BID:6158
Info
TinyHTTPD Input Validation Vulnerability
| Bugtraq ID: | 6158 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 12 2002 12:00AM |
| Updated: | Nov 12 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to "dong-h0un U" <[email protected]>. Vade 79 <[email protected]> is credited with reporting information about the possibility of exploiting the issue to execute arbitrary commands. |
| Vulnerable: |
TinyHTTPD TinyHTTPD 0.1 .0 |
| Not Vulnerable: | |
Solution / Fix
TinyHTTPD Input Validation Vulnerability
Solution:
An unofficial patch for the file disclosure attack has been released by "dong-houn yoU" (Xpl017Elz), of INetCop Security.
It should be noted that the software is no longer being maintained.
TinyHTTPD TinyHTTPD 0.1 .0
Solution:
An unofficial patch for the file disclosure attack has been released by "dong-houn yoU" (Xpl017Elz), of INetCop Security.
It should be noted that the software is no longer being maintained.
TinyHTTPD TinyHTTPD 0.1 .0
-
INetCop Security thttpd.patch
http://downloads.securityfocus.com/vulnerabilities/patches/thttpd.patc h
References
TinyHTTPD Input Validation Vulnerability
References:
References:
- Tiny httpd Product Page (Tiny httpd)
- Multiple vulnerabilities in Tiny HTTPd ("dong-h0un U"