CVE-2015-8212 CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware pro...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netbsd | = 6.0 | No fix listed |
| netbsd | = 6.0.1 | No fix listed |
| netbsd | = 6.0.2 | No fix listed |
| netbsd | = 6.0.3 | No fix listed |
| netbsd | = 6.0.4 | No fix listed |
| netbsd | = 6.0.5 | No fix listed |
| netbsd | = 6.0.6 | No fix listed |
| netbsd | = 6.1 | No fix listed |
| netbsd | = 6.1.1 | No fix listed |
| netbsd | = 6.1.2 | No fix listed |
| netbsd | = 6.1.3 | No fix listed |
| netbsd | = 6.1.4 | No fix listed |
| netbsd | = 6.1.5 | No fix listed |
| netbsd | = 7.0 | No fix listed |
References
- NetBSD-SA2016-005 vendor-advisory
- 1035673 third-party-advisory vdb-entry