← Back

Thttpd Http Server

thttpd_http_server

Vendor: Thttpd • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Thttpd
1Thttpd Http Server
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
1Thttpd
1Thttpd Http Server
Apr 16, 2026
Nov 16, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.