Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8r7-8362-fv6x

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.

EPSS

Процентиль: 88%
0.04101
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.

debian
больше 20 лет назад

Format string vulnerability in the cherokee_logger_ncsa_write_string f ...

EPSS

Процентиль: 88%
0.04101
Низкий