Detections
Analytics

thttpd < 2.05 If-Modified-Since Header Remote Overflow

medium Nessus Network Monitor Plugin ID 1469

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote thttpd server is vulnerable to a stack overflow when it is issued a malformed HTTP header. An attacker may use this bug to run arbitrary code on the remote server, with the privileges of the thttpd daemon (typically root or nobody).

Solution

Upgrade to thttpd 2.05 or higher.

Plugin Details

Severity: Medium

ID: 1469

Family: Web Servers

Published: 8/20/2004

Updated: 3/6/2019

Nessus ID: 10286

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:X

Vulnerability Information

CPE: cpe:/a:acme:thttpd

Reference Information

CVE: CVE-2000-0359

BID: 1248