CVE-2008-0408

N/A Unknown

Published: January 29, 2008 Modified: April 23, 2026

Description

HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/28631

Source: cve@mitre.org

http://securityreason.com/securityalert/3582

Source: cve@mitre.org

http://www.rejetto.com/hfs/?f=wn

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/486874/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27423

Source: cve@mitre.org

http://www.syhunt.com/advisories/hfs-1-username.txt

Source: cve@mitre.org

http://www.syhunt.com/advisories/hfshack.txt

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39876

Source: cve@mitre.org

http://secunia.com/advisories/28631