Miniweb Http Server

miniweb_http_server

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-0338 1Miniweb Http Server 1Miniweb Http Server Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encode...Show more Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.Show less
CVE-2008-0337 1Miniweb Http Server 1Miniweb Http Server Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.
CVE-2007-3159 1Miniweb Http Server 1Miniweb Http Server Apr 23, 2026 Jun 11, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.