Unrated severityNVD Advisory· Published Jan 29, 2008· Updated Jun 16, 2026
CVE-2008-0410
CVE-2008-0410
Description
HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as %version% in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*range: <=2.2b
- (no CPE)range: <2.2c
Patches
Vulnerability mechanics
References
8- www.rejetto.com/hfs/nvdExploit
- secunia.com/advisories/28631nvdVendor Advisory
- securityreason.com/securityalert/3583nvd
- www.securityfocus.com/archive/1/486872/100/0/threadednvd
- www.securityfocus.com/bid/27423nvd
- www.syhunt.com/advisories/hfs-1-template.txtnvd
- www.syhunt.com/advisories/hfshack.txtnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39871nvd
News mentions
0No linked articles in our index yet.