CVE-2009-4769

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 37.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-04-20 · updated 2026-06-16
Weakness: CWE-134

Description

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.

Affected products

JasPer Httpdx: 1.4, 1.4.5, 1.4.6, 1.4.6b, 1.5

References

http://osvdb.org/60181
http://osvdb.org/60182
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/http/httpdx_tolog_format.rb
http://www.vupen.com/english/advisories/2009/3312
http://osvdb.org/60181
http://osvdb.org/60182
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/http/httpdx_tolog_format.rb
http://www.vupen.com/english/advisories/2009/3312

Get alerted when CVE-2009-4769 or the next vulnerability affects your stack