CVE-2003-0899
CriticalSummary
Buffer overflow in the defang function in libhttpd.c for thttpd versions 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests containing '<' or '>' characters, which trigger the overflow when the characters are expanded to '<' and '>' sequences.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update thttpd to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.
Original NVD description (English source)
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.