CVE-2014-5015

Published: Jul 24, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.

Affected (40)

Products: Eterna: Bozohttpd · Netbsd: Netbsd

1 product

1 product

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Eterna Bozohttpd	Up to 20140201
Eterna Bozohttpd	Version 19990519
Eterna Bozohttpd	Version 20000421
Eterna Bozohttpd	Version 20000426
Eterna Bozohttpd	Version 20000427
Eterna Bozohttpd	Version 20000815
Eterna Bozohttpd	Version 20000825
Eterna Bozohttpd	Version 20010610
Eterna Bozohttpd	Version 20010812
Eterna Bozohttpd	Version 20010922
Eterna Bozohttpd	Version 20020710
Eterna Bozohttpd	Version 20020730
Eterna Bozohttpd	Version 20020803
Eterna Bozohttpd	Version 20020804
Eterna Bozohttpd	Version 20020823
Eterna Bozohttpd	Version 20020913
Eterna Bozohttpd	Version 20021106
Eterna Bozohttpd	Version 20030313
Eterna Bozohttpd	Version 20030409
Eterna Bozohttpd	Version 20030626
Eterna Bozohttpd	Version 20031005
Eterna Bozohttpd	Version 20040218
Eterna Bozohttpd	Version 20040808
Eterna Bozohttpd	Version 20050410
Eterna Bozohttpd	Version 20060517
Eterna Bozohttpd	Version 20060710
Eterna Bozohttpd	Version 20080303
Eterna Bozohttpd	Version 20090417
Eterna Bozohttpd	Version 20090522
Eterna Bozohttpd	Version 20100509
Eterna Bozohttpd	Version 20100512
Eterna Bozohttpd	Version 20100617
Eterna Bozohttpd	Version 20100621
Eterna Bozohttpd	Version 20100920
Eterna Bozohttpd	Version 20111118
Eterna Bozohttpd	Version 20140102
Netbsd Netbsd	Version 5.1
Netbsd Netbsd	Version 5.2
Netbsd Netbsd	Version 6.0
Netbsd Netbsd	Version 6.1