5

CVE-2014-5015

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eterna ≫ Bozohttpd Version <= 20140201
Eterna ≫ Bozohttpd Version 19990519
Eterna ≫ Bozohttpd Version 20000421
Eterna ≫ Bozohttpd Version 20000426
Eterna ≫ Bozohttpd Version 20000427
Eterna ≫ Bozohttpd Version 20000815
Eterna ≫ Bozohttpd Version 20000825
Eterna ≫ Bozohttpd Version 20010610
Eterna ≫ Bozohttpd Version 20010812
Eterna ≫ Bozohttpd Version 20010922
Eterna ≫ Bozohttpd Version 20020710
Eterna ≫ Bozohttpd Version 20020730
Eterna ≫ Bozohttpd Version 20020803
Eterna ≫ Bozohttpd Version 20020804
Eterna ≫ Bozohttpd Version 20020823
Eterna ≫ Bozohttpd Version 20020913
Eterna ≫ Bozohttpd Version 20021106
Eterna ≫ Bozohttpd Version 20030313
Eterna ≫ Bozohttpd Version 20030409
Eterna ≫ Bozohttpd Version 20030626
Eterna ≫ Bozohttpd Version 20031005
Eterna ≫ Bozohttpd Version 20040218
Eterna ≫ Bozohttpd Version 20040808
Eterna ≫ Bozohttpd Version 20050410
Eterna ≫ Bozohttpd Version 20060517
Eterna ≫ Bozohttpd Version 20060710
Eterna ≫ Bozohttpd Version 20080303
Eterna ≫ Bozohttpd Version 20090417
Eterna ≫ Bozohttpd Version 20090522
Eterna ≫ Bozohttpd Version 20100509
Eterna ≫ Bozohttpd Version 20100512
Eterna ≫ Bozohttpd Version 20100617
Eterna ≫ Bozohttpd Version 20100621
Eterna ≫ Bozohttpd Version 20100920
Eterna ≫ Bozohttpd Version 20111118
Eterna ≫ Bozohttpd Version 20140102
Netbsd ≫ Netbsd Version 5.1
Netbsd ≫ Netbsd Version 5.2
Netbsd ≫ Netbsd Version 6.0
Netbsd ≫ Netbsd Version 6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.74% 0.748
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.eterna.com.au/bozohttpd/CHANGES
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-007.txt.asc
Vendor Advisory
http://seclists.org/oss-sec/2014/q3/180
http://www.eterna.com.au/bozohttpd/
Patch
http://www.osvdb.org/109283
http://www.securityfocus.com/bid/68752
https://exchange.xforce.ibmcloud.com/vulnerabilities/94751