• info
• discussion
• exploit
• solution
• references

PWC.CGI Syslog Format String Vulnerability

Solution:
Patch:

change
syslog(LOG_ERR, buffer);
to
syslog(LOG_ERR, "%s", buffer);