Lucene search
MitreCVE-2010-2320HistoryAug 02, 2010 - 8:40 p.m.
CVE-2010-2320
2010-08-0220:40:01
CWE-264
mitre
web.nvd.nist.gov
22
cve-2010-2320
bozotic http server
bozohttpd
remote attackers
home directories
user accounts
security vulnerability
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.011
Percentile
84.4%
bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
Affected configurations
Node
eternabozohttpdRange≤20100617
OReternabozohttpdMatch19990519
OReternabozohttpdMatch20000421
OReternabozohttpdMatch20000426
OReternabozohttpdMatch20000427
OReternabozohttpdMatch20000815
OReternabozohttpdMatch20000825
OReternabozohttpdMatch20010610
OReternabozohttpdMatch20010812
OReternabozohttpdMatch20010922
OReternabozohttpdMatch20020710
OReternabozohttpdMatch20020730
OReternabozohttpdMatch20020803
OReternabozohttpdMatch20020804
OReternabozohttpdMatch20020823
OReternabozohttpdMatch20020913
OReternabozohttpdMatch20021106
OReternabozohttpdMatch20030313
OReternabozohttpdMatch20030409
OReternabozohttpdMatch20030626
OReternabozohttpdMatch20031005
OReternabozohttpdMatch20040218
OReternabozohttpdMatch20040808
OReternabozohttpdMatch20050410
OReternabozohttpdMatch20060517
OReternabozohttpdMatch20060710
OReternabozohttpdMatch20080303
OReternabozohttpdMatch20090417
OReternabozohttpdMatch20090522
OReternabozohttpdMatch20100509
OReternabozohttpdMatch20100512
| Vendor | Product | Version | CPE |
|---|---|---|---|
| eterna | bozohttpd | * | cpe:2.3:a:eterna:bozohttpd:*:*:*:*:*:*:*:* |
| eterna | bozohttpd | 19990519 | cpe:2.3:a:eterna:bozohttpd:19990519:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20000421 | cpe:2.3:a:eterna:bozohttpd:20000421:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20000426 | cpe:2.3:a:eterna:bozohttpd:20000426:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20000427 | cpe:2.3:a:eterna:bozohttpd:20000427:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20000815 | cpe:2.3:a:eterna:bozohttpd:20000815:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20000825 | cpe:2.3:a:eterna:bozohttpd:20000825:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20010610 | cpe:2.3:a:eterna:bozohttpd:20010610:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20010812 | cpe:2.3:a:eterna:bozohttpd:20010812:*:*:*:*:*:*:* |
| eterna | bozohttpd | 20010922 | cpe:2.3:a:eterna:bozohttpd:20010922:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-2320
2010-08-02 19:00:00
openvas
openvas
bozotic HTTP server Information Disclosure Vulnerability
2010-08-06 00:00:00
bozotic HTTP server Information Disclosure Vulnerability
2010-08-06 00:00:00
bozohttpd Security Bypass Vulnerability
2010-08-09 00:00:00
prion
prion
Design/Logic Flaw
2010-08-02 20:40:00
nvd
nvd
CVE-2010-2320
2010-08-02 20:40:01
ubuntucve
ubuntucve
CVE-2010-2320
2010-08-02 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.011
Percentile
84.4%
Related for CVE-2010-2320