CVE-2015-8212

Critical

Published: 19/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A CGI handling flaw in bozohttpd in NetBSD allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.

Risk Assessment

This vulnerability poses a serious security risk, allowing attackers to remotely take control of the system.

Recommendation

It is recommended to upgrade to the latest version of NetBSD to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.