Hfs Http File Server
6 CVEs affecting Hfs Http File Server. Latest disclosed: 2008-01-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2008-0410 | | 2008-01-29 | HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP… | |
CVE-2008-0409 | | 2008-01-29 | Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo… | |
CVE-2008-0408 | | 2008-01-29 | HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP… | |
CVE-2008-0407 | | 2008-01-29 | HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication… | |
CVE-2008-0406 | | 2008-01-29 | HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daemon crash) via a lon… | |
CVE-2008-0405 | | 2008-01-29 | Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to cre… |