CVE-2008-0408

HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:P/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
hfshttp_file_server
𝑥
≤ 2.2b
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/28631
http://securityreason.com/securityalert/3582
http://www.rejetto.com/hfs/?f=wn
http://www.securityfocus.com/archive/1/486874/100/0/threaded
http://www.securityfocus.com/bid/27423
http://www.syhunt.com/advisories/hfs-1-username.txt
http://www.syhunt.com/advisories/hfshack.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/39876