VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 17, 2007· Updated Jun 16, 2026

CVE-2007-6405

CVE-2007-6405

Description

Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Shttpd/Shttpd3 versions
    cpe:2.3:a:shttpd:shttpd:1.34:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:shttpd:shttpd:1.34:*:*:*:*:*:*:*
    • cpe:2.3:a:shttpd:shttpd:1.35:*:*:*:*:*:*:*
    • cpe:2.3:a:shttpd:shttpd:1.38:*:*:*:*:*:*:*
  • Sergey Lyubka/Simple Httpdllm-fuzzy
    Range: <=1.38

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.