CVE-2018-21245

概要

参考情報

• admin.hostpoint.ch/pipermail/pound_apsis.ch/2018-May/000054.html · Third Party Advisory
• bugs.gentoo.org/714084

pound のその他の脆弱性

• CVE-2016-10711緊急 9.8Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
• CVE-2005-3751中 4.3HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall pro…
• CVE-2005-1391高 7.5Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host …
• CVE-2004-2026高 7.5Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via …