CVE-2003-0899
Critical · 9.8CVSS
9.8
EPSS
22.2%
Published
Nov 3, 2003
CISA due date
—
The record
Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | thttpd | 0 | 2.21b-11.2 |
Related vulnerabilities
- CVE-2026-18743 A flaw was found in popt. CWE-131
- CVE-2026-78002 A flaw was found in rsyslog. CWE-131
- CVE-2026-65706 FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-65705 FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-54696 Ruby JSON is a JSON implementation for Ruby. CWE-131
- CVE-2026-46521 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
- CVE-2026-11604 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win… CWE-131
- CVE-2026-49841 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-131