HTTP File Serve multiple security vulnerabilities
Published:		24.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8604
Type:		remote
Level:		5/10
Description:		Crossite scripting, information disclosure, unauthroized files creation, log manipulation, user name spoofing.

Affected:		HFS : HTTP File Server 2.2
		HFS : HTTP File Server 2.3
		HFS : HTTP File Server 2.0
		HFS : HTTP File Server 2.1
CVE:		CVE-2008-0410
		CVE-2008-0409
		CVE-2008-0408
		CVE-2008-0407
		CVE-2008-0406
		CVE-2008-0405

Original document		Felipe M. Aragon, Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability (24.01.2008)
		Felipe M. Aragon, Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities (24.01.2008)
		Felipe M. Aragon, Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities (24.01.2008)

Discuss:

Read or add your comments to this news (0 comments)