CVE-2015-8212

Published: Jan 19, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.

Affected (14)

Products: Netbsd: Netbsd

Netbsd

1 product

Netbsd

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Netbsd Netbsd	Version 6.0.1
Netbsd Netbsd	Version 6.0.2
Netbsd Netbsd	Version 6.0.3
Netbsd Netbsd	Version 6.0.4
Netbsd Netbsd	Version 6.0.5
Netbsd Netbsd	Version 6.0.6
Netbsd Netbsd	Version 6.0
Netbsd Netbsd	Version 6.1.1
Netbsd Netbsd	Version 6.1.2
Netbsd Netbsd	Version 6.1.3
Netbsd Netbsd	Version 6.1.4
Netbsd Netbsd	Version 6.1.5
Netbsd Netbsd	Version 6.1
Netbsd Netbsd	Version 7.0