Dave Carrigan » Auth Ldap : Security Vulnerabilities, CVEs, CVSS score >= 7
Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.
Max CVSS
7.5
EPSS Score
17.21%
Published
2006-01-09
Updated
2018-10-19
1 vulnerabilities found