This page lists publicly disclosed CVE vulnerabilities affecting acme mini_httpd (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2017-17663 | The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution. | [email protected] | 9.8 | 2.45% | 2018-02-06 | 2024-11-21 |
| CVE-2015-1548 | mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. | [email protected] | 5.0 | 1.33% | 2015-02-10 | 2026-05-06 |
| CVE-2009-4490 | mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. | [email protected] | 5.0 | 10.27% | 2010-01-13 | 2026-04-23 |
| CVE-2001-0893 | Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /. | [email protected] | 5.0 | 2.53% | 2001-11-13 | 2026-06-16 |