PT-2014-6247
CVE-2014-5015
·
تاريخ النشر
2014-07-24
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
bozotic HTTP server (aka bozohttpd) versions before 20140708
Description
The issue allows remote attackers to bypass the HTTP authentication scheme and access restrictions. This is achieved by exploiting the path truncation when checking .htpasswd restrictions, enabling access to otherwise restricted areas via a long path.
Recommendations
For versions before 20140708, update to version 20140708 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾