Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-5015
HistoryJul 24, 2014 - 2:55 p.m.

Design/Logic Flaw

2014-07-2414:55:00
PRIOn knowledge base
www.prio-n.com
3

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%