VULNERABILITY INTELLIGENCE

CVE-2008-7014

CVSS score5 MEDIUM

EPSS probability2.61%

CISA KEVNot currently listed

Published2009-08-19

Last modified2026-06-16

Description

fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.