CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0150

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.103

EPSS Ranking 92.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2006-0150

Dave Carrigan » Auth Ldap » Version: 1.2.1

cpe:2.3:a:dave_carrigan:auth_ldap:1.2.1
Dave Carrigan » Auth Ldap » Version: 1.2.2

cpe:2.3:a:dave_carrigan:auth_ldap:1.2.2
Dave Carrigan » Auth Ldap » Version: 1.2.3

cpe:2.3:a:dave_carrigan:auth_ldap:1.2.3
Dave Carrigan » Auth Ldap » Version: 1.2.4

cpe:2.3:a:dave_carrigan:auth_ldap:1.2.4
Dave Carrigan » Auth Ldap » Version: 1.3.0

cpe:2.3:a:dave_carrigan:auth_ldap:1.3.0
Dave Carrigan » Auth Ldap » Version: 1.3.1

cpe:2.3:a:dave_carrigan:auth_ldap:1.3.1
Dave Carrigan » Auth Ldap » Version: 1.3.2

cpe:2.3:a:dave_carrigan:auth_ldap:1.3.2
Dave Carrigan » Auth Ldap » Version: 1.3.3

cpe:2.3:a:dave_carrigan:auth_ldap:1.3.3
Dave Carrigan » Auth Ldap » Version: 1.3.4

cpe:2.3:a:dave_carrigan:auth_ldap:1.3.4
Dave Carrigan » Auth Ldap » Version: 1.4.0

cpe:2.3:a:dave_carrigan:auth_ldap:1.4.0
Dave Carrigan » Auth Ldap » Version: 1.4.2

cpe:2.3:a:dave_carrigan:auth_ldap:1.4.2
Dave Carrigan » Auth Ldap » Version: 1.4.3

cpe:2.3:a:dave_carrigan:auth_ldap:1.4.3
Dave Carrigan » Auth Ldap » Version: 1.6.0

cpe:2.3:a:dave_carrigan:auth_ldap:1.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0150

Products

Pricing

Contact Us