Test ID:	1.3.6.1.4.1.25623.1.0.801246
Category:	Web Servers
Title:	bozotic HTTP server Information Disclosure Vulnerability
Summary:	This host is running bozotic HTTP server and is prone to information; disclosure vulnerability.
Description:	Summary: This host is running bozotic HTTP server and is prone to information disclosure vulnerability. Vulnerability Insight: The server is not properly handling requests to a user's public_html folder while the folder does not exist. This can be exploited to determine the existence of user accounts via multiple requests for URIs beginning with /~ sequences. Vulnerability Impact: Successful exploitation will allow attacker to determine the existence of a user and potentially disclose the user's files. Affected Software/OS: bozotic HTTP server (aka bozohttpd) versions before 20100621. Solution: Upgrade to bozotic HTTP server version 20100621 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2320 http://secunia.com/advisories/40737 XForce ISS Database: bozohttp-publichtml-info-disclosure(60812) https://exchange.xforce.ibmcloud.com/vulnerabilities/60812
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.