Bozohttpd

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5015 Jul 24, 14:55 MEDIUM PATCH This Month

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Netbsd Bozohttpd Eterna

NVD

CVSS 2.0

5.0

EPSS

0.6%

CVE-2014-5015

EPSS 1% CVSS 5.0

MEDIUM PATCH This Month

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Netbsd Bozohttpd +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy