Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

eterna bozohttpd 20040218 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2010-2320
bozotic HTTP server (aka bozohttpd) prior to 20100621 allows remote malicious users to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
Eterna Bozohttpd 20100512Eterna Bozohttpd 20090522Eterna Bozohttpd 20040218Eterna Bozohttpd 20060517Eterna Bozohttpd 20020730Eterna Bozohttpd 20090417Eterna Bozohttpd 20000427Eterna Bozohttpd 20000815Eterna Bozohttpd 20030313Eterna Bozohttpd 20031005Eterna Bozohttpd 20080303Eterna Bozohttpd 20010922Eterna Bozohttpd 20020913Eterna Bozohttpd 19990519Eterna Bozohttpd 20010812Eterna BozohttpdEterna Bozohttpd 20030409Eterna Bozohttpd 20050410Eterna Bozohttpd 20020710Eterna Bozohttpd 20020823Eterna Bozohttpd 20020804Eterna Bozohttpd 20021106
445
VMScore
CVE-2014-5015
bozotic HTTP server (aka bozohttpd) prior to 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote malicious users to bypass the HTTP authentication scheme and access restrictions via a long path.
Netbsd Netbsd 6.0Netbsd Netbsd 5.2Eterna Bozohttpd 20090417Eterna Bozohttpd 20080303Eterna Bozohttpd 20140102Eterna Bozohttpd 20111118Eterna Bozohttpd 20100617Eterna Bozohttpd 20100512Eterna Bozohttpd 20040808Eterna Bozohttpd 20040218Eterna Bozohttpd 20020823Eterna Bozohttpd 20020804Eterna Bozohttpd 20000825Eterna Bozohttpd 20000815Eterna Bozohttpd 20100920Netbsd Netbsd 6.1Eterna Bozohttpd 20100509Eterna Bozohttpd 20090522Eterna Bozohttpd 20031005Eterna Bozohttpd 20030626Eterna Bozohttpd 20020803Eterna Bozohttpd 20020730
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook