← Back

Auth Ldap

auth_ldap

Vendor: Dave Carrigan • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dave Carrigan
1Auth Ldap
Apr 16, 2026
Jan 9, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.