PT-2001-2581 · Thttpd · Thttpd

CVE-2001-1496 · Publicado 2001-12-31 · Atualizado 2024-02-08

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions thttpd versions 1.95 through 2.20

Description The issue is an off-by-one buffer overflow in Basic Authentication, allowing remote attackers to cause a denial of service and possibly execute arbitrary code.

Recommendations For versions 1.95 through 2.20, consider disabling Basic Authentication until a patch is available to prevent potential exploitation. Restrict access to the authentication module to minimize the risk of denial of service or arbitrary code execution.

Correção

DoS

Enumeração de Fraquezas

CWE-193

Identificadores relacionados

CVE-2001-1496

Produtos afetados

Thttpd

Referências · 7

• http://securityfocus.com/archive/1/241953 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1496 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1496 · Nota de Segurança
• http://securityfocus.com/archive/1/241310 · Nota
• http://securityfocus.com/bid/3562 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7595 · Nota
• https://t.me/cvenotify/70539 · Publicação no Telegram