EUVD-2008-0418

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

HFS before 2.2c allows text appending to log file via HTTP Basic Authentication vulnerability.

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2008-0408	28 Jan 200823:00	–	cve
Cvelist	CVE-2008-0408	28 Jan 200823:00	–	cvelist
Exploit DB	Rejetto HTTP File Server (HFS) 1.5/2.x - Multiple Vulnerabilities	23 Jan 200800:00	–	exploitdb
exploitpack	Rejetto HTTP File Server (HFS) 1.52.x - Multiple Vulnerabilities	23 Jan 200800:00	–	exploitpack
NVD	CVE-2008-0408	29 Jan 200800:00	–	nvd
Packet Storm	hfshack.txt	24 Jan 200800:00	–	packetstorm
Prion	Authentication flaw	29 Jan 200800:00	–	prion
securityvulns	Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability	24 Jan 200800:00	–	securityvulns
securityvulns	HTTP File Serve multiple security vulnerabilities	24 Jan 200800:00	–	securityvulns
seebug.org	HFS HTTP File Server多个远程安全漏洞	26 Jan 200800:00	–	seebug

[
  {
    "enisaIdVendor": [
      {
        "id": "4809134e-3754-3c93-a271-a589eb0882f3",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "12f8471a-9f36-3c78-8a30-1fc0a65fa07b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2008-0408
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/39876
securityfocus	www.securityfocus.com/archive/1/486874/100/0/threaded
rejetto	www.rejetto.com/hfs/
securityfocus	www.securityfocus.com/bid/27423
syhunt	www.syhunt.com/advisories/hfs-1-username.txt
syhunt	www.syhunt.com/advisories/hfshack.txt
secunia	www.secunia.com/advisories/28631
securityreason	www.securityreason.com/securityalert/3582
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.4

EPSS0.00778