CVE-2003-0899

Fixed in a distro release EPSS 22%

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "&lt;" and "&gt;" sequences.

Published 2003-10-30 · CVE record · OSV

Products: acme thttpd

Distro releases