CVE-2009-2936

CVE-2009-2936 affects the Varnish reverse proxy CLI in the master process prior to 2.1.0, where the TCP-based commands do not require authentication. The vulnerability can allow remote attackers to: (1) execute arbitrary code via a vcl.inline directive containing inline C code; (2) change the mas...

CVE-2009-4488

Varnish 2.0.6 is affected by CVE-2009-4488: it writes to a log file without sanitizing non-printable characters, which could let remote attackers modify a window title or potentially execute arbitrary commands or overwrite files via an HTTP request containing an escape sequence for a terminal emu...