Vulnerabilities > CVE-2002-1562 - Unspecified vulnerability in Acme Labs Thttpd

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
acme-labs
nessus
NVD
Published: 2003-05-12
Updated: 2024-11-20

Summary

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.

Vulnerable Configurations

Part Description Count
Application
Acme_Labs
1

Nessus

  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-396.NASL
    descriptionSeveral vulnerabilities have been discovered in thttpd, a tiny HTTP server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2002-1562: Information leak Marcus Breiing discovered that if thttpd it is used for virtual hosting, and an attacker supplies a specially crafted
    last seen2020-06-01
    modified2020-06-02
    plugin id15233
    published2004-09-29
    reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/15233
    titleDebian DSA-396-1 : thttpd - missing input sanitizing, wrong calculation
  • NASL familyWeb Servers
    NASL idTHTTPD_VIRTUALHOST_ESCAPE.NASL
    descriptionThe remote HTTP server allows anyone to browse the files on the remote host by sending HTTP requests with a Host: field set to
    last seen2020-06-01
    modified2020-06-02
    plugin id11576
    published2003-05-06
    reporterThis script is Copyright (C) 2003-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/11576
    titlethttpd Host Header Traversal Arbitrary File Access
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SA_2003_044.NASL
    descriptionThe remote host is missing the patch for the advisory SuSE-SA:2003:044 (thttpd). Two vulnerabilities were found in the
    last seen2020-06-01
    modified2020-06-02
    plugin id13812
    published2004-07-25
    reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/13812
    titleSuSE-SA:2003:044: thttpd

References