Lucene search

K
cvelistDebianCVELIST:CVE-2014-5015
HistoryJul 24, 2014 - 2:00 p.m.

CVE-2014-5015

2014-07-2414:00:00
debian
www.cve.org
1

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.8%

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.8%