Description
Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-952-1 libapache-auth-ldap - format string vulnerability Debian Security (DSA / DLA) · Mar 9, 2026
References
- apache-authldap-format-string(24030) vdb-entry
- ADV-2006-0117 vdb-entry
- 1015456 vdb-entry
- 18412 third-party-advisory
- MDKSA-2006:017 vendor-advisory
- 18382 third-party-advisory
- http://www.rudedog.org/auth_ldap/Changes.html
- 20060109 Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability mailing-list
- 16177 vdb-entry
- 18568 third-party-advisory
- RHSA-2006:0179 vendor-advisory
- http://www.digitalarmaments.com/2006090173928420.html
- DSA-952 vendor-advisory
- 18405 third-party-advisory