← Database

CVE-2006-0150

HIGH CVSS: 7.5 Published: 2006-01-09 Modified: 2026-06-16

Description

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

Affected Platforms

Dave Carrigan Auth Ldap

Weakness Type

CWE-134

References