Strix
26.1K

CVE-2010-2320

UnknownEPSS 2.38%

Last modified

CVE-2010-2320 is a vulnerability of currently unknown severity. bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.. EPSS estimates a 2.38% chance of exploitation in the next 30 days.

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

Metrics

EPSS Probability
2.38%

81.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
EternaBozohttpd<= 20100617
EternaBozohttpd19990519
EternaBozohttpd20000421
EternaBozohttpd20000426
EternaBozohttpd20000427
EternaBozohttpd20000815
EternaBozohttpd20000825
EternaBozohttpd20010610
EternaBozohttpd20010812
EternaBozohttpd20010922
EternaBozohttpd20020710
EternaBozohttpd20020730
EternaBozohttpd20020803
EternaBozohttpd20020804
EternaBozohttpd20020823
EternaBozohttpd20020913
EternaBozohttpd20021106
EternaBozohttpd20030313
EternaBozohttpd20030409
EternaBozohttpd20030626
EternaBozohttpd20031005
EternaBozohttpd20040218
EternaBozohttpd20040808
EternaBozohttpd20050410
EternaBozohttpd20060517
EternaBozohttpd20060710
EternaBozohttpd20080303
EternaBozohttpd20090417
EternaBozohttpd20090522
EternaBozohttpd20100509
EternaBozohttpd20100512

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-2320?
bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
How severe is CVE-2010-2320?
Severity scoring for CVE-2010-2320 is pending analysis. The EPSS model estimates a 2.38% probability of exploitation in the next 30 days.
How do I fix CVE-2010-2320?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2010

View all 2010CVEs →

Are you affected by CVE-2010-2320?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST