Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mod_gzip格式字符串漏洞
Vulnerability Description
mod_gzip 1.3.26.1a及其早期版本和可能之后官方版本中的mod_gzip_printf存在格式字符串漏洞。当运行在调试模式下和使用Apache日志时，远程攻击者可以通过具有“Accept - Encoding：gzip”头的HTTP GET请求中的格式字符串执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A