Back to search
CVE-2014-5015
Published: Jul 24, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
68752
vdb-entry
x_refsource_BID
http://www.eterna.com.au/bozohttpd/CHANGES
x_refsource_CONFIRM
109283
vdb-entry
x_refsource_OSVDB
http://www.eterna.com.au/bozohttpd/
x_refsource_CONFIRM
netbsd-cve20145015-info-disc(94751)
vdb-entry
x_refsource_XF
[oss-security] 20140718 Re: CVE Request: bozohttpd: basic http authentication bypass
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now