Lucene search
HistoryAug 02, 2010 - 8:40 p.m.
CVE-2010-2320
cve-2010-2320
bozotic http server
bozohttpd
remote attackers
home directories
user accounts
security vulnerability
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
Affected configurations
Node
eternabozohttpdRange≤20100617
OReternabozohttpdMatch19990519
OReternabozohttpdMatch20000421
OReternabozohttpdMatch20000426
OReternabozohttpdMatch20000427
OReternabozohttpdMatch20000815
OReternabozohttpdMatch20000825
OReternabozohttpdMatch20010610
OReternabozohttpdMatch20010812
OReternabozohttpdMatch20010922
OReternabozohttpdMatch20020710
OReternabozohttpdMatch20020730
OReternabozohttpdMatch20020803
OReternabozohttpdMatch20020804
OReternabozohttpdMatch20020823
OReternabozohttpdMatch20020913
OReternabozohttpdMatch20021106
OReternabozohttpdMatch20030313
OReternabozohttpdMatch20030409
OReternabozohttpdMatch20030626
OReternabozohttpdMatch20031005
OReternabozohttpdMatch20040218
OReternabozohttpdMatch20040808
OReternabozohttpdMatch20050410
OReternabozohttpdMatch20060517
OReternabozohttpdMatch20060710
OReternabozohttpdMatch20080303
OReternabozohttpdMatch20090417
OReternabozohttpdMatch20090522
OReternabozohttpdMatch20100509
OReternabozohttpdMatch20100512
Related
openvas
openvas
bozotic HTTP server Information Disclosure Vulnerability
2010-08-06 00:00:00
bozotic HTTP server Information Disclosure Vulnerability
2010-08-06 00:00:00
bozohttpd Security Bypass Vulnerability
2010-08-09 00:00:00
cvelist
cvelist
CVE-2010-2320
2010-08-02 19:00:00
prion
prion
Design/Logic Flaw
2010-08-02 20:40:00
nvd
nvd
CVE-2010-2320
2010-08-02 20:40:01
ubuntucve
ubuntucve
CVE-2010-2320
2010-08-02 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
Related for CVE-2010-2320