Buffer overflow in defang in libhttpd.c for thttpd 2.21... · CVE-2003-0899 · GitHub Advisory Database · GitHub

Buffer overflow in defang in libhttpd.c for thttpd 2.21...

High severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Feb 11, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.

References

Published by the National Vulnerability Database

Nov 3, 2003

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Feb 11, 2024

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Learn more on MITRE.

CWE-131

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow. Learn more on MITRE.