auth_ldap: format string vulnerability
| Package(s): | auth_ldap | CVE #(s): | CVE-2006-0150 | ||||||||||||||||
| Created: | January 10, 2006 | Updated: | February 28, 2006 | ||||||||||||||||
| Description: | The auth_ldap package is an httpd module that allows user authentication against information stored in an LDAP database. A format string flaw was found in the way auth_ldap logs information. It may be possible for a remote attacker to execute arbitrary code as the 'apache' user if auth_ldap is used for user authentication. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||