CVE-2008-0408

HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.

Link	Resource
http://www.rejetto.com/hfs/?f=wn	Exploit
http://www.syhunt.com/advisories/hfs-1-username.txt
http://www.syhunt.com/advisories/hfshack.txt
http://secunia.com/advisories/28631
http://securityreason.com/securityalert/3582
http://www.securityfocus.com/bid/27423
https://exchange.xforce.ibmcloud.com/vulnerabilities/39876
http://www.securityfocus.com/archive/1/486874/100/0/threaded

Configuration 1

cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*

---

Published : 2008-01-29 12:00

Updated : 2018-10-15 09:59

---

NVD link : CVE-2008-0408

Mitre link : CVE-2008-0408

No products.

CWE-287