Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

eterna bozohttpd 20000421 vulnerabilities and exploits

(subscribe to this query)
445
VMScore

CVE-2014-5015

bozotic HTTP server (aka bozohttpd) prior to 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote malicious users to bypass the HTTP authentication scheme and access restrictions via a long path.
Netbsd Netbsd 5.1Netbsd Netbsd 6.0Eterna Bozohttpd 20090417Eterna Bozohttpd 20080303Eterna Bozohttpd 20030313Eterna Bozohttpd 20100617Eterna Bozohttpd 20000421Eterna Bozohttpd 20000825Eterna Bozohttpd 20100512Eterna Bozohttpd 20021106Eterna Bozohttpd 20060710Eterna Bozohttpd 20020803Eterna Bozohttpd 20020804Eterna Bozohttpd 20050410Eterna Bozohttpd 20100621Eterna Bozohttpd 20090522Eterna Bozohttpd 20040808Eterna Bozohttpd 20020730Eterna Bozohttpd 20030626Eterna Bozohttpd 20030409Eterna Bozohttpd 20100509Eterna Bozohttpd 20010922
445
VMScore

CVE-2010-2320

bozotic HTTP server (aka bozohttpd) prior to 20100621 allows remote malicious users to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
Eterna Bozohttpd 20090417Eterna Bozohttpd 20080303Eterna Bozohttpd 20030313Eterna Bozohttpd 20000421Eterna Bozohttpd 20000825Eterna Bozohttpd 20100512Eterna Bozohttpd 20021106Eterna Bozohttpd 20060710Eterna Bozohttpd 20020803Eterna Bozohttpd 20020804Eterna Bozohttpd 20050410Eterna Bozohttpd 20090522Eterna Bozohttpd 20040808Eterna Bozohttpd 20020730Eterna Bozohttpd 20030626Eterna Bozohttpd 20030409Eterna Bozohttpd 20100509Eterna Bozohttpd 20010922Eterna Bozohttpd 20020710Eterna Bozohttpd 20000426Eterna Bozohttpd 20031005Eterna Bozohttpd 20040218
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook