Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-0150
HistoryJan 09, 2006 - 12:00 a.m.

CVE-2006-0150

2006-01-0900:00:00
ubuntu.com
ubuntu.com
10

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.17 Low

EPSS

Percentile

96.1%

Multiple format string vulnerabilities in the auth_ldap_log_reason function
in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute
arbitrary code via various vectors, including the username.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.17 Low

EPSS

Percentile

96.1%