Description
Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
References
- 19980823 Solaris ab2 web server is junk mailing-list
- 253 vdb-entry