CVEvulnerability
CVE-2008-0408
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-287
Description
HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.
Affected configurations
• hfs http file server (<= 2.2b)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/28631 secunia.com
- http://securityreason.com/securityalert/3582 securityreason.com
- http://www.rejetto.com/hfs/?f=wn Exploit
- http://www.securityfocus.com/archive/1/486874/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27423 www.securityfocus.com
- http://www.syhunt.com/advisories/hfs-1-username.txt www.syhunt.com
- http://www.syhunt.com/advisories/hfshack.txt www.syhunt.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39876 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28631 secunia.com
- http://securityreason.com/securityalert/3582 securityreason.com
- http://www.rejetto.com/hfs/?f=wn Exploit
- http://www.securityfocus.com/archive/1/486874/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27423 www.securityfocus.com
- http://www.syhunt.com/advisories/hfs-1-username.txt www.syhunt.com
- http://www.syhunt.com/advisories/hfshack.txt www.syhunt.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39876 exchange.xforce.ibmcloud.com