CVE-2009-4769: Critical severity Jasper Httpdx vulnerability
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4769?
CVE-2009-4769 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2009-4769?
To fix CVE-2009-4769, upgrade to a patched version of Httpdx that is not vulnerable to format string attacks.
What are the affected versions for CVE-2009-4769?
CVE-2009-4769 affects Httpdx versions 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5.
What types of attacks can CVE-2009-4769 facilitate?
CVE-2009-4769 can facilitate remote code execution through malicious format string specifiers in HTTP GET requests.
Are both authenticated and unauthenticated users affected by CVE-2009-4769?
Yes, CVE-2009-4769 can be exploited by both remote attackers and authenticated users.