CVE search · CVE-2015-8212
CVE-2015-8212
critical 9.8
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-20
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.0 | critical 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netbsd · netbsd
References
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-005.txt.ascVendor Advisory
- http://www.securitytracker.com/id/1035673Third Party AdvisoryVDB Entry
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-005.txt.ascVendor Advisory
- http://www.securitytracker.com/id/1035673Third Party AdvisoryVDB Entry