Unrated severityNVD Advisory· Published Jan 29, 2008· Updated Apr 23, 2026
CVE-2008-0410
CVE-2008-0410
Description
HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.rejetto.com/hfs/nvdExploit
- secunia.com/advisories/28631nvdVendor Advisory
- securityreason.com/securityalert/3583nvd
- www.securityfocus.com/archive/1/486872/100/0/threadednvd
- www.securityfocus.com/bid/27423nvd
- www.syhunt.com/advisories/hfs-1-template.txtnvd
- www.syhunt.com/advisories/hfshack.txtnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39871nvd
News mentions
0No linked articles in our index yet.