CVE-2008-7014

fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-08-19

Last modified

2024-08-07

Affected products

• Fhttpd (Fhttpd)

References

• http://www.securityfocus.com/bid/31265
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45278
• https://www.exploit-db.com/exploits/6493