CVE-2010-2320

N/A Unknown

Published: August 02, 2010 Modified: April 29, 2026

Description

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/40737

Source: cve@mitre.org

Vendor Advisory

http://security-tracker.debian.org/tracker/CVE-2010-2320

Source: cve@mitre.org

http://www.eterna.com.au/bozohttpd/CHANGES

Source: cve@mitre.org

https://bugs.launchpad.net/ubuntu/+source/bozohttpd/+bug/582473

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60812

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298