CVE-2010-2320

medium

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/60812

http://www.eterna.com.au/bozohttpd/CHANGES

http://security-tracker.debian.org/tracker/CVE-2010-2320

http://secunia.com/advisories/40737

Details

Source: Mitre, NVD

Published: 2010-08-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N