CVE-2010-2271

CVE-2010-2271 concerns the Accoria Web Server (aka Rock Web Server) version 1.4.7, where a format string vulnerability exists in the file/auth module: authcfg.cgi. The root cause is improper handling of user-supplied format string specifiers in the Password File path parameter, which could allow ...