thttpd < 2.05 If-Modified-Since Header Remote Overflow

Medium Nessus Network Monitor Plugin ID 1469

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote thttpd server is vulnerable to a stack overflow when it is issued a malformed HTTP header. An attacker may use this bug to run arbitrary code on the remote server, with the privileges of the thttpd daemon (typically root or nobody).

Solution

Upgrade to thttpd 2.05 or higher.

Plugin Details

Severity: Medium

ID: 1469

File Name: 1469.prm

Family: Web Servers

Published: 2004/08/20

Modified: 2016/02/05

Dependencies: 1442

Nessus ID: 10286

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:U/RL:OF/RC:ND

CVSSv3

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS3#E:U/RL:O/RC:X

Vulnerability Information

CPE: cpe:/a:acme:thttpd

Reference Information

CVE: CVE-2000-0359

BID: 1248