Dave Carrigan: >> Auth Ldap >> 1.4.3 Security Vulnerabilities
Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.
CVSS Score
7.5
EPSS Score
0.103
Published
2006-01-09