Secunia

A vulnerability has been reported in thttpd, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the "defang()" function when handling certain input. This can be exploited to cause a buffer overflow by supplying specially crafted input containing multiple "<" and ">" characters.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been reported in versions 2.21 through 2.23b1.

Solution
Update to version 2.24:
Further details available in Customer Area

Provided and/or discovered by
Joel Soderberg and Christer Oberg, Texonet.

Original Advisory
http://www.texonet.com/advisories/TEXONET-20030908.txt

Deep Links
Links available in Customer Area