{"id":"CVE-2003-0899","aliases":["DSA-396","EUVD-2003-0889","GHSA-28q9-rp4x-j7g7"],"status":"published","title":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to...","description":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '\u003c' or '\u003e' characters, which trigger the overflow when the characters are expanded to \"\u0026lt;\" and \"\u0026gt;\" sequences.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.22187,"percentile":0.97687,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119","CWE-131"],"published":"2003-10-29T00:00:00Z","modified":"2026-06-16T22:03:09Z","exploits":[{"source":"exploitdb","id":"EDB-23305","title":"thttpd 2.2x - 'defang' Remote Buffer Overflow (PoC)","type":"dos","platform":"linux","date":"2003-10-27","verified":true,"url":"https://www.exploit-db.com/exploits/23305"},{"source":"exploitdb","id":"EDB-23306","title":"thttpd 2.2x - 'defang' Remote Buffer Overflow","type":"remote","platform":"linux","date":"2003-10-27","verified":true,"url":"https://www.exploit-db.com/exploits/23306"}],"affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"thttpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21b-11.2"}]}],"bundled":2}],"products":[{"vendor":"acme","product":"thttpd"}],"references":[{"url":"http://www.securityfocus.com/bid/8906","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2003/dsa-396","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/10092","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2729","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.texonet.com/advisories/TEXONET-20030908.txt","tags":["x_refsource_MISC","x_transferred","Broken Link","URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq\u0026m=106729188224252\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13530","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0899"},{"url":"https://github.com/advisories/GHSA-28q9-rp4x-j7g7"}],"sources":{"cve":[{"id":"CVE-2003-0899","description":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '\u003c' or '\u003e' characters, which trigger the overflow when the characters are expanded to \"\u0026lt;\" and \"\u0026gt;\" sequences.","status":"published","published":"2003-10-30T05:00:00Z","modified":"2024-08-08T02:05:12.644Z","updated_at":"2026-11-02T14:20:17.11067Z"}],"euvd":[{"id":"EUVD-2003-0889","description":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '\u003c' or '\u003e' characters, which trigger the overflow when the characters are expanded to \"\u0026lt;\" and \"\u0026gt;\" sequences.","status":"published","published":"2003-10-30T05:00:00Z","modified":"2024-08-08T02:05:12Z","updated_at":"2026-11-03T01:15:05.487655Z"}],"ghsa":[{"id":"GHSA-28q9-rp4x-j7g7","title":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to...","description":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '\u003c' or '\u003e' characters, which trigger the overflow when the characters are expanded to \"\u0026lt;\" and \"\u0026gt;\" sequences.","status":"published","published":"2022-04-29T01:27:11Z","modified":"2024-02-11T05:08:20Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-131"],"updated_at":"2026-11-02T14:55:35.698137Z"}],"nvd":[{"id":"CVE-2003-0899","description":"Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '\u003c' or '\u003e' characters, which trigger the overflow when the characters are expanded to \"\u0026lt;\" and \"\u0026gt;\" sequences.","status":"published","published":"2003-11-03T05:00:00Z","modified":"2026-06-16T22:03:09.093Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-131"],"updated_at":"2026-11-02T14:00:47.41445Z"}],"osv":[{"id":"DSA-396","title":"thttpd - missing input sanitizing, wrong calculation","status":"published","published":"2003-10-29T00:00:00Z","modified":"2026-03-09T02:11:45.582819Z","updated_at":"2026-11-02T15:46:16.523846Z"}]}}