CVE-2006-0150

2006-01-0923:03:00

CWE-134

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.17

Percentile

96.1%

JSON

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

Affected configurations

Nvd

Node

dave_carriganauth_ldapMatch1.2.1

dave_carriganauth_ldapMatch1.2.2

dave_carriganauth_ldapMatch1.2.3

dave_carriganauth_ldapMatch1.2.4

dave_carriganauth_ldapMatch1.3.0

dave_carriganauth_ldapMatch1.3.1

dave_carriganauth_ldapMatch1.3.2

dave_carriganauth_ldapMatch1.3.3

dave_carriganauth_ldapMatch1.3.4

dave_carriganauth_ldapMatch1.4.0

dave_carriganauth_ldapMatch1.4.2

dave_carriganauth_ldapMatch1.4.3

dave_carriganauth_ldapMatch1.6.0

VendorProductVersionCPE
dave_carriganauth_ldap1.2.1cpe:2.3:a:dave_carrigan:auth_ldap:1.2.1:*:*:*:*:*:*:*
dave_carriganauth_ldap1.2.2cpe:2.3:a:dave_carrigan:auth_ldap:1.2.2:*:*:*:*:*:*:*
dave_carriganauth_ldap1.2.3cpe:2.3:a:dave_carrigan:auth_ldap:1.2.3:*:*:*:*:*:*:*
dave_carriganauth_ldap1.2.4cpe:2.3:a:dave_carrigan:auth_ldap:1.2.4:*:*:*:*:*:*:*
dave_carriganauth_ldap1.3.0cpe:2.3:a:dave_carrigan:auth_ldap:1.3.0:*:*:*:*:*:*:*
dave_carriganauth_ldap1.3.1cpe:2.3:a:dave_carrigan:auth_ldap:1.3.1:*:*:*:*:*:*:*
dave_carriganauth_ldap1.3.2cpe:2.3:a:dave_carrigan:auth_ldap:1.3.2:*:*:*:*:*:*:*
dave_carriganauth_ldap1.3.3cpe:2.3:a:dave_carrigan:auth_ldap:1.3.3:*:*:*:*:*:*:*
dave_carriganauth_ldap1.3.4cpe:2.3:a:dave_carrigan:auth_ldap:1.3.4:*:*:*:*:*:*:*
dave_carriganauth_ldap1.4.0cpe:2.3:a:dave_carrigan:auth_ldap:1.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dave_carrigan	auth_ldap	1.2.1	cpe:2.3:a:dave_carrigan:auth_ldap:1.2.1:::::::*
dave_carrigan	auth_ldap	1.2.2	cpe:2.3:a:dave_carrigan:auth_ldap:1.2.2:::::::*
dave_carrigan	auth_ldap	1.2.3	cpe:2.3:a:dave_carrigan:auth_ldap:1.2.3:::::::*
dave_carrigan	auth_ldap	1.2.4	cpe:2.3:a:dave_carrigan:auth_ldap:1.2.4:::::::*
dave_carrigan	auth_ldap	1.3.0	cpe:2.3:a:dave_carrigan:auth_ldap:1.3.0:::::::*
dave_carrigan	auth_ldap	1.3.1	cpe:2.3:a:dave_carrigan:auth_ldap:1.3.1:::::::*
dave_carrigan	auth_ldap	1.3.2	cpe:2.3:a:dave_carrigan:auth_ldap:1.3.2:::::::*
dave_carrigan	auth_ldap	1.3.3	cpe:2.3:a:dave_carrigan:auth_ldap:1.3.3:::::::*
dave_carrigan	auth_ldap	1.3.4	cpe:2.3:a:dave_carrigan:auth_ldap:1.3.4:::::::*
dave_carrigan	auth_ldap	1.4.0	cpe:2.3:a:dave_carrigan:auth_ldap:1.4.0:::::::*