Vulnerability in Fhttpd

CVE-2008-7014

fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

  • Fhttpd — versions 0.4.2
  • N/a — versions n/a

References