Vulnerabilities

TI-2008-00313 CVE-2008-0338 · GHSA-m4mr-h478-pp3f

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb…

LOW 28

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encode…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02811 Published 2008-01-17 No fix listed CWE-22

TI-2008-00312 CVE-2008-0337 · GHSA-cm79-7hxq-2rmr

Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP…

MEDIUM 41

Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0536 Published 2008-01-17 No fix listed CWE-119

TI-2007-03056 CVE-2007-3159 · GHSA-7xh6-3wvw-j67f

http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service…

LOW 28

http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02759 Published 2007-06-11 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb…

Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP…

http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service…