Detections
Analytics

thttpd Host Header Traversal Arbitrary File Access

medium Nessus Plugin ID 11576

Language:

Synopsis

It may be possible to read arbitrary files from the remote system.

Description

The remote HTTP server allows anyone to browse the files on the remote host by sending HTTP requests with a Host: field set to '../../'.

Solution

Upgrade to thttpd 2.23 or newer.

Plugin Details

Severity: Medium

ID: 11576

File Name: thttpd_virtualhost_escape.nasl

Version: 1.18

Type: remote

Family: Web Servers

Published: 5/6/2003

Updated: 8/1/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 10/31/2002

Reference Information

CVE: CVE-2002-1562, CVE-2003-0899

BID: 8924, 8906

CWE: 119

SuSE: SUSE-SA:2003:044