Skip to content
OpenAdvisories
Unscored DLA-490-1 2 CVEs

bozohttpd - security update

Published May 26, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 bozohttpd 20111118-1+deb7u1

Vulnerabilities 2

  • Unscored —

    bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restric…

  • Unscored —

    CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execu…