CVE-2010-2320: Eterna Bozohttpd

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.

Affected products

• Eterna Bozohttpd: up to and including 20100617; version 19990519 only; version 20000421 only; version 20000426 only; version 20000427 only; version 20000815 only; …

Published 2010-08-02. Last modified 2026-06-16.