Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-4494HistoryJan 13, 2010 - 8:30 p.m.
CVE-2009-4494
2010-01-1320:30:00
Debian Security Bug Tracker
security-tracker.debian.org
7
0.002 Low
EPSS
Percentile
53.6%
AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window’s title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | aolserver4 | <= 4.5.1-18.1 | aolserver4_4.5.1-18.1_all.deb |
Related
cve
cve
CVE-2009-4494
2010-01-13 20:30:00
openvas
openvas
AOLServer Terminal Escape Sequence in Logs Command Injection Vulnerability
2010-01-13 00:00:00
AOLServer Terminal Escape Sequence in Logs Command Injection Vulnerability
2010-01-13 00:00:00
cvelist
cvelist
CVE-2009-4494
2010-01-13 20:00:00
nvd
nvd
CVE-2009-4494
2010-01-13 20:30:00
ubuntucve
ubuntucve
CVE-2009-4494
2010-01-13 00:00:00
prion
prion
Design/Logic Flaw
2010-01-13 20:30:00
securityvulns
securityvulns
packetstorm
packetstorm
Nginx, Varnish, Cherokee, etc Log Injection
2010-01-11 00:00:00