An Httpd

an-httpd

Vendor: An • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-1598 1An 1An Httpd Apr 16, 2026 Apr 3, 2006 N/A· v4 N/A· v3 7.8 HIGH· v2 AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.
CVE-2005-1086 1An 1An Httpd Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
CVE-2005-1087 1An 1An Httpd Apr 16, 2026 Apr 7, 2005 N/A· v4 N/A· v3 6.4 MEDIUM· v2 CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences i...Show more CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.Show less
CVE-2002-1930 1An 1An Httpd Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
CVE-1999-0947 1An 1An Httpd Apr 16, 2026 Nov 2, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.