← back
CVE-2003-0899

CVE-2003-0899

EPSS 21.7%
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "&lt;" and "&gt;" sequences.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/23305unverifiedexploitdbwww.exploit-db.com/exploits/23306unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=106729188224252&w=2http://secunia.com/advisories/10092https://exchange.xforce.ibmcloud.com/vulnerabilities/13530https://www.debian.org/security/2003/dsa-396http://www.osvdb.org/2729http://www.securityfocus.com/bid/8906http://www.texonet.com/advisories/TEXONET-20030908.txt