Unrated severityNVD Advisory· Published Jan 29, 2008· Updated Jun 16, 2026
CVE-2008-0406
CVE-2008-0406
Description
HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daemon crash) via a long account name.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*range: <=2.2b
- (no CPE)range: <2.2c
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/28631nvdVendor Advisory
- securityreason.com/securityalert/3581nvd
- www.rejetto.com/hfs/nvd
- www.securityfocus.com/archive/1/486873/100/0/threadednvd
- www.securityfocus.com/bid/27423nvd
- www.syhunt.com/advisories/hfs-1-log.txtnvd
- www.syhunt.com/advisories/hfshack.txtnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39875nvd
News mentions
0No linked articles in our index yet.