CVE-2008-0406 describes a denial-of-service vulnerability in HTTP File Server (HFS) versions prior to 2.2c. This flaw allows remote attackers to crash the HFS daemon by providing an excessively long account name, specifically when account names are used for log filenames. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low attack complexity, and a partial impact on availability. While there is an ExploitDB entry referencing multiple HFS vulnerabilities, there is no indication of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage for this specific CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.2bCPE matchmatch criteria | cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.