VYPR

htpasswd

by Apache

CVEs (2)

  • CVE-2006-1078HigMar 9, 2006
    risk 0.55cvss 8.4epss 0.01

    Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a…

  • CVE-2006-1079Mar 9, 2006
    risk 0.00cvss epss 0.00

    htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a…