Unscored CVE-2015-1443 EUVD-2015-1578GHSA-p4w2-ggrw-5m79

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

Published Aug 28, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

References

http://www.fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt
[oss-security] 20150201 Re: RCE, XSS and HTTP header injection in fli4l web interface mailing-list
[oss-security] 20150131 RCE, XSS and HTTP header injection in fli4l web interface mailing-list