CVE-2004-2628

N/A

Description

Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence ("%5C..") or (2) a drive letter (such as "C:").

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/2004

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

acme_labs:thttpd

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0097.html(cve@mitre.org)

http://marc.info/?l=bugtraq&m=109164010629836&w=2(cve@mitre.org)

http://securitytracker.com/alerts/2004/Aug/1010850.html(cve@mitre.org)

http://www.acme.com/software/thttpd/#releasenotes(cve@mitre.org)

http://www.osvdb.org/displayvuln.php?osvdb_id=8372(cve@mitre.org)

http://www.securityfocus.com/bid/10862(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16882(cve@mitre.org)

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0097.html(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=109164010629836&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/alerts/2004/Aug/1010850.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.acme.com/software/thttpd/#releasenotes(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/displayvuln.php?osvdb_id=8372(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/10862(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16882(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.