PT-2018-6543 · Acme+2 · Thttpd+3

Alessio Santoru · Published 2018-02-06 · Updated 2025-06-28 · CVE-2017-17663

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mini httpd versions prior to 1.28 thttpd versions prior to 2.28

Description: The issue is related to a buffer overflow in the htpasswd implementation, which can be exploited remotely to perform code execution.

Recommendations: For mini httpd versions prior to 1.28, update to version 1.28 or later. For thttpd versions prior to 2.28, update to version 2.28 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2020-2953

ALT-PU-2021-3120

ALT-PU-2024-14062

CVE-2017-17663

OPENSUSE-SU-2024:11460-1

Affected Products

Alt Linux

Debian

Mini Httpd

Thttpd

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2017-17663 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17663 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11460-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-17663 · Security Note
• https://ubuntu.com/security/CVE-2017-17663 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-17663 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-17663 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2017-17663 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-17663 · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-17663 · Note
• http://acme.com/updates/archive/199.html · Note
• https://security.alpinelinux.org/vuln/CVE-2017-17663 · Note
• https://t.me/purp_sec/810 · Telegram Post
• https://t.me/aptreports/19882 · Telegram Post