CVE-1999-1457

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Nov 16, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1457 is a buffer overflow vulnerability affecting versions of the thttpd HTTP server before 2.04-31. The issue arises from the server's failure to properly handle long date strings, leading to an overflow in the tdate_parse function. Attackers can exploit this vulnerability to execute arbitrary commands remotely. This flaw poses a significant risk to systems running the affected version of thttpd and should be addressed promptly by applying the available patch.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share