← voltar
CVE-2008-0407

CVE-2008-0407

EPSS 1.6%
HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://secunia.com/advisories/28631http://securityreason.com/securityalert/3582https://exchange.xforce.ibmcloud.com/vulnerabilities/39877http://www.rejetto.com/hfs/?f=wnhttp://www.securityfocus.com/archive/1/486874/100/0/threadedhttp://www.securityfocus.com/bid/27423http://www.syhunt.com/advisories/hfs-1-username.txthttp://www.syhunt.com/advisories/hfshack.txt