Unscored CVE-2010-2320 EUVD-2010-2330GHSA-jxqf-38mj-cx5m

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the exi…

Published Aug 2, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

References

http://www.eterna.com.au/bozohttpd/CHANGES
40737 third-party-advisory
bozohttp-publichtml-info-disclosure(60812) vdb-entry
http://security-tracker.debian.org/tracker/CVE-2010-2320
https://bugs.launchpad.net/ubuntu/+source/bozohttpd/+bug/582473
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298