CVE-2008-0407 | BDVDB-2026-28902 Detail
Description#
HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/486874/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39877
- http://www.rejetto.com/hfs/?f=wn
- http://www.securityfocus.com/bid/27423
- http://www.syhunt.com/advisories/hfs-1-username.txt
- http://www.syhunt.com/advisories/hfshack.txt
- http://secunia.com/advisories/28631
- http://securityreason.com/securityalert/3582
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.