| Package | Affected versions | Patched versions |
|---|---|---|
| cherokee httpd | = 0.1= 0.1.5= 0.1.6= 0.2= 0.2.5= 0.2.6= 0.2.7= 0.4.17= 0.4.6= 0.4.7= 0.4.8 |
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free