The rotatelogs program on Apache prior to 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are received over the pipe, which could allow remote malicious users to cause a denial of service.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apache http server |