CVE-2010-2320

Published: Aug 2, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

Affected (31)

Products: Eterna: Bozohttpd

Eterna

1 product

Bozohttpd

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Eterna Bozohttpd	Up to 20100617
Eterna Bozohttpd	Version 19990519
Eterna Bozohttpd	Version 20000421
Eterna Bozohttpd	Version 20000426
Eterna Bozohttpd	Version 20000427
Eterna Bozohttpd	Version 20000815
Eterna Bozohttpd	Version 20000825
Eterna Bozohttpd	Version 20010610
Eterna Bozohttpd	Version 20010812
Eterna Bozohttpd	Version 20010922
Eterna Bozohttpd	Version 20020710
Eterna Bozohttpd	Version 20020730
Eterna Bozohttpd	Version 20020803
Eterna Bozohttpd	Version 20020804
Eterna Bozohttpd	Version 20020823
Eterna Bozohttpd	Version 20020913
Eterna Bozohttpd	Version 20021106
Eterna Bozohttpd	Version 20030313
Eterna Bozohttpd	Version 20030409
Eterna Bozohttpd	Version 20030626
Eterna Bozohttpd	Version 20031005
Eterna Bozohttpd	Version 20040218
Eterna Bozohttpd	Version 20040808
Eterna Bozohttpd	Version 20050410
Eterna Bozohttpd	Version 20060517
Eterna Bozohttpd	Version 20060710
Eterna Bozohttpd	Version 20080303
Eterna Bozohttpd	Version 20090417
Eterna Bozohttpd	Version 20090522
Eterna Bozohttpd	Version 20100509
Eterna Bozohttpd	Version 20100512