Vulnerability Details CVE-2017-17663
The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-17663
-
cpe:2.3:a:acme:mini_httpd:-
-
cpe:2.3:a:acme:mini_httpd:1.00
-
cpe:2.3:a:acme:mini_httpd:1.01
-
cpe:2.3:a:acme:mini_httpd:1.02
-
cpe:2.3:a:acme:mini_httpd:1.03
-
cpe:2.3:a:acme:mini_httpd:1.04
-
cpe:2.3:a:acme:mini_httpd:1.05
-
cpe:2.3:a:acme:mini_httpd:1.06
-
cpe:2.3:a:acme:mini_httpd:1.07
-
cpe:2.3:a:acme:mini_httpd:1.08
-
cpe:2.3:a:acme:mini_httpd:1.09
-
cpe:2.3:a:acme:mini_httpd:1.10
-
cpe:2.3:a:acme:mini_httpd:1.11
-
cpe:2.3:a:acme:mini_httpd:1.12
-
cpe:2.3:a:acme:mini_httpd:1.13
-
cpe:2.3:a:acme:mini_httpd:1.14
-
cpe:2.3:a:acme:mini_httpd:1.15
-
cpe:2.3:a:acme:mini_httpd:1.15b
-
cpe:2.3:a:acme:mini_httpd:1.15c
-
cpe:2.3:a:acme:mini_httpd:1.16
-
cpe:2.3:a:acme:mini_httpd:1.17
-
cpe:2.3:a:acme:mini_httpd:1.18
-
cpe:2.3:a:acme:mini_httpd:1.19
-
cpe:2.3:a:acme:mini_httpd:1.20
-
cpe:2.3:a:acme:mini_httpd:1.21
-
cpe:2.3:a:acme:mini_httpd:1.22
-
cpe:2.3:a:acme:mini_httpd:1.23
-
cpe:2.3:a:acme:mini_httpd:1.24
-
cpe:2.3:a:acme:mini_httpd:1.25
-
cpe:2.3:a:acme:mini_httpd:1.26
-
cpe:2.3:a:acme:mini_httpd:1.27
-
-
cpe:2.3:a:acme:thttpd:1.90
-
cpe:2.3:a:acme:thttpd:1.95
-
cpe:2.3:a:acme:thttpd:2.00
-
cpe:2.3:a:acme:thttpd:2.01
-
cpe:2.3:a:acme:thttpd:2.02
-
cpe:2.3:a:acme:thttpd:2.03
-
cpe:2.3:a:acme:thttpd:2.04
-
cpe:2.3:a:acme:thttpd:2.05
-
cpe:2.3:a:acme:thttpd:2.06
-
cpe:2.3:a:acme:thttpd:2.07
-
cpe:2.3:a:acme:thttpd:2.08
-
cpe:2.3:a:acme:thttpd:2.09
-
cpe:2.3:a:acme:thttpd:2.10
-
cpe:2.3:a:acme:thttpd:2.11
-
cpe:2.3:a:acme:thttpd:2.12
-
cpe:2.3:a:acme:thttpd:2.13
-
cpe:2.3:a:acme:thttpd:2.14
-
cpe:2.3:a:acme:thttpd:2.15
-
cpe:2.3:a:acme:thttpd:2.16
-
cpe:2.3:a:acme:thttpd:2.17
-
cpe:2.3:a:acme:thttpd:2.18
-
cpe:2.3:a:acme:thttpd:2.19
-
cpe:2.3:a:acme:thttpd:2.20
-
cpe:2.3:a:acme:thttpd:2.21
-
cpe:2.3:a:acme:thttpd:2.22
-
cpe:2.3:a:acme:thttpd:2.23
-
cpe:2.3:a:acme:thttpd:2.24
-
cpe:2.3:a:acme:thttpd:2.25
-
cpe:2.3:a:acme:thttpd:2.26
-
cpe:2.3:a:acme:thttpd:2.27