|
Apache Error Log Escape Sequence Injection Vulnerability
It has been reported that the Apache web server is prone to a remote error log escape sequence injection vulnerability. This issue is due to an input validation error that may allow escape character sequences to be injected into apache log files. This may facilitate exploitation of issues such as those found in BIDs 6936 and 6938. This issue may allow an attacker to carry out a number of actions including arbitrary file creation and code execution on the affected system. |
|
|
Privacy Statement |
