Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Eterna Component: Bozohttpd Clear all filters
TI-2014-04117 CVE-2014-5015 · GHSA-wxpg-jc4m-2rq2

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths…

Priority LOW 26

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01743 Published 2014-07-24 No fix listed CWE-264
TI-2010-02227 CVE-2010-2320 · GHSA-jxqf-38mj-cx5m

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the…

Priority LOW 27

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequenc…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02385 Published 2010-08-02 No fix listed CWE-264