CVE-2015-8212
Fixed in a distro release EPSS 3%
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.
Products: netbsd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | bozohttpd | 20111118-1+deb7u1 |
| Ubuntu 14.04 LTS | bozohttpd | 20111118-1+deb7u1build0.14.04.1 |