CVE-2006-0150

2006-01-0923:03:00

CWE-134

[email protected]

web.nvd.nist.gov

cve-2006-0150

apache

auth_ldap

format string

vulnerability

remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.17 Low

EPSS

Percentile

96.1%

JSON

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

Affected configurations

NVD

Node

dave_carriganauth_ldapMatch1.2.1

dave_carriganauth_ldapMatch1.2.2

dave_carriganauth_ldapMatch1.2.3

dave_carriganauth_ldapMatch1.2.4

dave_carriganauth_ldapMatch1.3.0

dave_carriganauth_ldapMatch1.3.1

dave_carriganauth_ldapMatch1.3.2

dave_carriganauth_ldapMatch1.3.3

dave_carriganauth_ldapMatch1.3.4

dave_carriganauth_ldapMatch1.4.0

dave_carriganauth_ldapMatch1.4.2

dave_carriganauth_ldapMatch1.4.3

dave_carriganauth_ldapMatch1.6.0

CPENameOperatorVersion
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.2.1
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.2.2
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.2.3
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.2.4
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.3.0
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.3.1
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.3.2
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.3.3
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.3.4
dave_carrigan:auth_ldapdave carrigan auth ldapeq1.4.0

CPE	Name	Operator	Version
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.2.1
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.2.2
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.2.3
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.2.4
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.3.0
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.3.1
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.3.2
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.3.3
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.3.4
dave_carrigan:auth_ldap	dave carrigan auth ldap	eq	1.4.0