CVE-2009-4496: Input Validation
Published Jan 13, 2010
·Updated
Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Affected Software
1 affected component
Boa Boa=0.94.14rc21
Event History
Jan 13, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4496?
CVE-2009-4496 is considered a critical vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2009-4496?
To fix CVE-2009-4496, upgrade Boa to the latest version that addresses this vulnerability.
3
What are the potential impacts of CVE-2009-4496?
The potential impacts of CVE-2009-4496 include arbitrary command execution and unauthorized file modification.
4
What versions of Boa are affected by CVE-2009-4496?
CVE-2009-4496 specifically affects Boa version 0.94.14rc21.
5
How can CVE-2009-4496 be exploited?
CVE-2009-4496 can be exploited via crafted HTTP requests containing escape sequences.