CVE-2015-0859 | BDVDB-2026-73015 Detail

Description#

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2015/dsa-3405

Exploit#

No public exploit known

History#

Version 12015-12-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.