icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

thttpd < 2.24 Host:' Header Traversal File Access / libhttpd.c defang Overflow

High

Synopsis

The remote host is using an old version of thttpd which is vulnerable to a directory traversal when virtual hosting is enabled.

Description

The remote host is using an old version of thttpd which is vulnerable to a directory traversal when virtual hosting is enabled. An attacker may use this flaw to read arbitrary files on the remote host.

Solution

Upgrade to thttpd 2.24 or higher.