Code injection

2017-01-1920:59:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.

CPENameOperatorVersion
netbsdeq6.1.1
netbsdeq6.1.3
netbsdeq6.0
netbsdeq6.1.4
netbsdeq6.0.4
netbsdeq6.0.6
netbsdeq7.0
netbsdeq6.0.2
netbsdeq6.0.5
netbsdeq6.1.2