bozotic HTTP server Information Disclosure Vulnerability

bozotic HTTP server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-2320

CVE-2010-2320 affects bozotic HTTP server (bozohttpd). The OpenVAS entries describe an information disclosure vulnerability and a security bypass that lets remote attackers list home-directory contents and infer user accounts by requesting URIs beginning with /~. The NVD description confirms the ...

CVE-2010-2320

bozotic HTTP server aka bozohttpd before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with / sequences...