CVE-2010-2320
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
bozotic HTTP server (también conocido como bozohttpd), en versiones anteriores a la 20100621, permite a atacantes remotos listar el contenido de los directorios home y conocer las cuentas de usuario mediante múltiples peticiones a URIs que empiezan con secuencias /~.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-06-17 CVE Reserved
- 2010-08-02 CVE Published
- 2024-02-11 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://security-tracker.debian.org/tracker/CVE-2010-2320 | X_refsource_confirm | |
| http://www.eterna.com.au/bozohttpd/CHANGES | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/60812 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298 | 2024-08-07 | |
| https://bugs.launchpad.net/ubuntu/+source/bozohttpd/+bug/582473 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/40737 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | <= 20100617 Search vendor "Eterna" for product "Bozohttpd" and version " <= 20100617" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 19990519 Search vendor "Eterna" for product "Bozohttpd" and version "19990519" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20000421 Search vendor "Eterna" for product "Bozohttpd" and version "20000421" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20000426 Search vendor "Eterna" for product "Bozohttpd" and version "20000426" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20000427 Search vendor "Eterna" for product "Bozohttpd" and version "20000427" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20000815 Search vendor "Eterna" for product "Bozohttpd" and version "20000815" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20000825 Search vendor "Eterna" for product "Bozohttpd" and version "20000825" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20010610 Search vendor "Eterna" for product "Bozohttpd" and version "20010610" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20010812 Search vendor "Eterna" for product "Bozohttpd" and version "20010812" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20010922 Search vendor "Eterna" for product "Bozohttpd" and version "20010922" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020710 Search vendor "Eterna" for product "Bozohttpd" and version "20020710" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020730 Search vendor "Eterna" for product "Bozohttpd" and version "20020730" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020803 Search vendor "Eterna" for product "Bozohttpd" and version "20020803" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020804 Search vendor "Eterna" for product "Bozohttpd" and version "20020804" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020823 Search vendor "Eterna" for product "Bozohttpd" and version "20020823" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20020913 Search vendor "Eterna" for product "Bozohttpd" and version "20020913" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20021106 Search vendor "Eterna" for product "Bozohttpd" and version "20021106" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20030313 Search vendor "Eterna" for product "Bozohttpd" and version "20030313" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20030409 Search vendor "Eterna" for product "Bozohttpd" and version "20030409" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20030626 Search vendor "Eterna" for product "Bozohttpd" and version "20030626" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20031005 Search vendor "Eterna" for product "Bozohttpd" and version "20031005" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20040218 Search vendor "Eterna" for product "Bozohttpd" and version "20040218" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20040808 Search vendor "Eterna" for product "Bozohttpd" and version "20040808" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20050410 Search vendor "Eterna" for product "Bozohttpd" and version "20050410" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20060517 Search vendor "Eterna" for product "Bozohttpd" and version "20060517" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20060710 Search vendor "Eterna" for product "Bozohttpd" and version "20060710" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20080303 Search vendor "Eterna" for product "Bozohttpd" and version "20080303" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20090417 Search vendor "Eterna" for product "Bozohttpd" and version "20090417" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20090522 Search vendor "Eterna" for product "Bozohttpd" and version "20090522" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20100509 Search vendor "Eterna" for product "Bozohttpd" and version "20100509" | - |
Affected
| ||||||
| Eterna Search vendor "Eterna" | Bozohttpd Search vendor "Eterna" for product "Bozohttpd" | 20100512 Search vendor "Eterna" for product "Bozohttpd" and version "20100512" | - |
Affected
| ||||||