PT-2018-6543 · Acme+2 · Thttpd+3

Alessio Santoru · Publicado 2018-02-06 · Atualizado 2025-06-28 · CVE-2017-17663

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mini httpd versions prior to 1.28 thttpd versions prior to 2.28

Description: The issue is related to a buffer overflow in the htpasswd implementation, which can be exploited remotely to perform code execution.

Recommendations: For mini httpd versions prior to 1.28, update to version 1.28 or later. For thttpd versions prior to 2.28, update to version 2.28 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2020-2953

ALT-PU-2021-3120

ALT-PU-2024-14062

CVE-2017-17663

OPENSUSE-SU-2024:11460-1

Produtos afetados

Alt Linux

Debian

Mini Httpd

Thttpd

Referências · 14

• https://nvd.nist.gov/vuln/detail/CVE-2017-17663 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-17663 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-17663 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11460-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-17663 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-17663 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-17663 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-17663 · Aviso do Fabricante
• http://acme.com/updates/archive/199.html · Nota
• https://security.alpinelinux.org/vuln/CVE-2017-17663 · Nota
• https://t.me/purp_sec/810 · Publicação no Telegram
• https://osv.dev/vulnerability/ALPINE-CVE-2017-17663 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-17663 · Aviso do Fabricante
• https://t.me/aptreports/19882 · Publicação no Telegram