CVE-2008-0409

Mô tả

Tham khảo

• secunia.com/advisories/28631 · Vendor Advisory
• securityreason.com/securityalert/3583
• rejetto.com/hfs · Exploit
• securityfocus.com/archive/1/486872/100/0/threaded
• securityfocus.com/bid/27423
• syhunt.com/advisories/hfs-1-template.txt
• syhunt.com/advisories/hfshack.txt
• exchange.xforce.ibmcloud.com/vulnerabilities/39870

Lỗ hổng khác của http file server

• CVE-2008-0410TRUNG BÌNH 5.0HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%ver…
• CVE-2008-0408TRUNG BÌNH 6.4HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of th…
• CVE-2008-0407TRUNG BÌNH 5.0HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whet…
• CVE-2008-0406TRUNG BÌNH 5.0HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daem…
• CVE-2008-0405NGHIÊM TRỌNG 10.0Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remo…