thttpd has a local DoS vulnerability via specially-crafted .htpasswd files
thttpd has a local DoS vulnerability via specially-crafted .htpasswd files
References
- http://www.openwall.com/lists/oss-security/2012/12/15/1 x_refsource_MISC
- Red Hat vendor-advisory x_refsource_REDHAT
- https://security-tracker.debian.org/tracker/CVE-2012-5640 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5640 x_refsource_MISC
- https://security-tracker.debian.org/tracker/CVE-2012-5640 x_transferred x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5640 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2012/12/15/1 x_transferred x_refsource_MISC
- Red Hat vendor-advisory x_refsource_REDHAT x_transferred
- http://www.openwall.com/lists/oss-security/2012/12/15/1 x_refsource_MISC
- Red Hat vendor-advisory x_refsource_REDHAT
- https://security-tracker.debian.org/tracker/CVE-2012-5640 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5640 x_refsource_MISC
- https://security-tracker.debian.org/tracker/CVE-2012-5640 x_transferred x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5640 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2012/12/15/1 x_transferred x_refsource_MISC
- Red Hat vendor-advisory x_refsource_REDHAT x_transferred
Affected products
thttpd
- ==2012-12-15
Matching in nixpkgs
pkgs.thttpd
Tiny/turbo/throttling HTTP server
pkgs.althttpd
Althttpd webserver
-
nixos-unstable 0-unstable-2025-08-22
- nixpkgs-unstable 0-unstable-2025-08-22
- nixos-unstable-small 0-unstable-2025-08-22
-
nixos-25.11 0-unstable-2023-08-12
- nixos-25.11-small 0-unstable-2023-08-12
- nixpkgs-25.11-darwin 0-unstable-2023-08-12
Package maintainers
-
@siraben Siraphob Phipathananunth <bensiraphob@gmail.com>