CVE:CVE-2014-5015
CNNVD:CNNVD-201407-610
NetBSD是NetBSD基金会开发的一套免费开源的类Unix操作系统。bozotic HTTP server（又名bozohttpd）是一款HTTP服务器。
在NetBSD操作系统中使用的bozotic HTTP server 20140708之前版本中存在安全漏洞，该漏洞源于程序检查‘.htpasswd’文件的权限时截断了路径。远程攻击者可通过发送较长的路径利用该漏洞绕过HTTP认证机制和访问限制。
solution:Upgrade eterna bozohttpd to a higher version than 20140201,19990519,20000421,20000426,20000427,20000815,20000825,20010610,20010812,20010922,20020710,20020730,20020803,20020804,20020823,20020913,20021106,20030313,20030409,20030626,20031005,20040218,20040808,20050410,20060517,20060710,20080303,20090417,20090522,20100509,20100512,20100617,20100621,20100920,20111118,20140102,and avoid the version (,20140201],19990519,20000421,20000426,20000427,20000815,20000825,20010610,20010812,20010922,20020710,20020730,20020803,20020804,20020823,20020913,20021106,20030313,20030409,20030626,20031005,20040218,20040808,20050410,20060517,20060710,20080303,20090417,20090522,20100509,20100512,20100617,20100621,20100920,20111118,20140102; Upgrade netbsd netbsd to a higher version than 5.1,5.2,6.0,6.1,and avoid the version 5.1,5.2,6.0,6.1