CVE-2008-0408: HFS HTTP File Server

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.

Affected products

• HFS HTTP File Server: up to and including 2.2b

Published 2008-01-29. Last modified 2026-06-16.