exploits , vulnerabilities , articles , Acme thttpd/mini_httpd Virtual Hosting File Disclosure Vulnerability

Title	Acme thttpd/mini_httpd Virtual Hosting File Disclosure Vulnerability
Published	2002-10-31-12:00AM
Updated	2003-11-06-08:05PM
Class	Access Validation Error
CVE	CAN-2002-1562
Remote	Yes
Local	No
Credit	Discovery is credited to Marcus Breiing.
Vulnerable	Acme thttpd 2.23 b1 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 Acme thttpd 2.22 Acme thttpd 2.21 b Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc Acme thttpd 2.21 Acme thttpd 2.20 c Conectiva Linux 9.0 S.u.S.E. Linux 8.0 Acme thttpd 2.20 b S.u.S.E. Linux 7.3 Acme thttpd 2.20 Acme thttpd 2.19 Acme thttpd 2.18 Acme thttpd 2.17 Acme thttpd 2.16 Acme thttpd 2.15 S.u.S.E. Linux 6.4 Acme thttpd 2.14 Acme thttpd 2.13 Acme thttpd 2.12 Acme thttpd 2.11 Acme thttpd 2.10 Acme thttpd 2.0.9 Acme thttpd 2.0.8 Acme thttpd 2.0.7 Acme thttpd 2.0.6 Acme thttpd 2.0.5 FREESCO FREESCO 0.2.7 FREESCO FREESCO 0.3 .0 FREESCO FREESCO 0.3.1 FREESCO FREESCO 0.3.2 Acme thttpd 2.0.4 S.u.S.E. Linux 6.2 S.u.S.E. Linux 6.3 Acme thttpd 2.0.3 Acme thttpd 2.0.2 Acme thttpd 2.0.1 Acme thttpd 2.0 Acme thttpd 1.95 Acme thttpd 1.90 a Acme thttpd 1.0 Acme mini_httpd 1.16 Acme mini_httpd 1.15 c Acme mini_httpd 1.15 b Acme mini_httpd 1.15 Acme mini_httpd 1.14 Acme mini_httpd 1.13 Acme mini_httpd 1.12 Acme mini_httpd 1.11 Acme mini_httpd 1.10 0 Acme mini_httpd 1.0 1 Acme mini_httpd 1.0 0
Not Vulnerable	Acme thttpd 2.24 Acme mini_httpd 1.18
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-09-06 Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities
• 2008-09-05 NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability
• 2008-09-05 Drupal Content Creation Kit Module Multiple HTML Injection Vulnerabilities
• 2008-09-05 HP OpenView Select Identity Connectors Local Information Disclosure Vulnerability
• 2008-09-05 eZoneScripts Dating Website Remote File Upload Vulnerability
• 2008-09-05 MicroTik RouterOS SNMP Security Bypass Vulnerability
• 2008-09-04 Dnsmasq DCHP Lease Multiple Remote Denial Of Service Vulnerabilities
• 2008-09-04 Zen Cart Multiple SQL Injection Vulnerabilities
• 2008-09-04 NETGEAR WN802T Wireless Access Point EAPoL Key Length Denial of Service Vulnerability
• 2008-09-04 Atheros Communications AR5416-AC1E Information Element Denial of Service Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sun, 07 Sep 2008 09:33:16 +0000