CVE:CVE-2010-2320
CNNVD:CNNVD-201008-009
bozotic HTTP服务器(又名 bozohttpd)20100621之前的型号存在漏洞。远程攻击者可以借助以"/~"序列开头的多个URIs请求获取主目录列表内容，并确定用户账号的存在。
solution:Upgrade eterna bozohttpd to a higher version than 20100617,19990519,20000421,20000426,20000427,20000815,20000825,20010610,20010812,20010922,20020710,20020730,20020803,20020804,20020823,20020913,20021106,20030313,20030409,20030626,20031005,20040218,20040808,20050410,20060517,20060710,20080303,20090417,20090522,20100509,20100512,and avoid the version (,20100617],19990519,20000421,20000426,20000427,20000815,20000825,20010610,20010812,20010922,20020710,20020730,20020803,20020804,20020823,20020913,20021106,20030313,20030409,20030626,20031005,20040218,20040808,20050410,20060517,20060710,20080303,20090417,20090522,20100509,20100512