PT-2009-2483 · Fhttpd · Fhttpd

Jeremy Brown · Published 2009-08-19 · Updated 2017-09-29 · CVE-2008-7014

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions fhttpd version 0.4.2

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending an Authorization HTTP header with an invalid character after the Basic value.

Recommendations For fhttpd version 0.4.2, consider restricting access to the Authorization HTTP header or validating its input to prevent the denial of service.

Exploit

Fix

Related Identifiers

CVE-2008-7014

Affected Products

Fhttpd

References · 4

• 🔥 https://exploit-db.com/exploits/6493 · Exploit
• 🔥 http://securityfocus.com/bid/31265 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7014 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45278 · Note