Description
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
References
- 20020506 [VulnWatch] ldap vulnerabilities mailing-list
- 4679 vdb-entry
- squidauthldap-logging-format-string(9019) vdb-entry
- 20020506 ldap vulnerabilities mailing-list
- 20020506 ldap vulnerabilities mailing-list