Vulnerabilities

TI-2009-02798 CVE-2009-2936 · GHSA-vq42-25hh-c536

The Command Line Interface (aka Server CLI or administration interface) in the master…

HIGH 68

The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.63824 Published 2010-04-05 No fix listed CWE-287

TI-2009-04249 CVE-2009-4488 · GHSA-xm68-4v8h-h9rf

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters…

MEDIUM 63

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12997 Published 2010-01-13 No fix listed CWE-1284

Vulnerabilities

Filters

The Command Line Interface (aka Server CLI or administration interface) in the master…

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters…