CVE-2015-8212: Input Validation
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability described in CVE-2015-8212?
CVE-2015-8212 is a CGI handling flaw in bozohttpd in NetBSD that allows remote attackers to execute arbitrary code through crafted arguments.
Which versions of NetBSD are affected by CVE-2015-8212?
CVE-2015-8212 affects NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0.
What is the potential impact of CVE-2015-8212?
The potential impact of CVE-2015-8212 is arbitrary code execution, which could compromise the integrity and confidentiality of the system.
How can I mitigate the risk of CVE-2015-8212?
To mitigate the risk of CVE-2015-8212, it is recommended to upgrade to a patched version of NetBSD that addresses this vulnerability.
Is there an official advisory for CVE-2015-8212?
Yes, there is an official advisory for CVE-2015-8212 provided by NetBSD detailing the vulnerability and the recommended actions.