CVE-2010-2320

MEDIUM 5.0CVE-2010-2320 · Published 02/08/2010 · updated 16/06/2026

In short

CVE-2010-2320 is a MEDIUM (CVSS 5.0) vulnerability affecting bozohttpd (eterna).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bozohttpd eterna	`= 19990519= 20000421= 20000426= 20000427= 20000815= 20000825= 20010610= 20010812= 20010922= 20020710= 20020730= 20020803= 20020804= 20020823= 20020913= 20021106= 20030313= 20030409= 20030626= 20031005= 20040218= 20040808= 20050410= 20060517= 20060710= 20080303= 20090417= 20090522= 20100509= 20100512≤ 20100617`	No fix yet

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
secunia.com/advisories/40737 · Vendor Advisory
security-tracker.debian.org/tracker/CVE-2010-2320
eterna.com.au/bozohttpd/CHANGES
bugs.launchpad.net/ubuntu/+source/bozohttpd/+bug/582473 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/60812

More vulnerabilities in bozohttpd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free