Unrated severityNVD Advisory· Published Apr 20, 2010· Updated Apr 29, 2026
CVE-2009-4769
CVE-2009-4769
Description
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.
Affected products
5Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rbnvdExploit
- www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/http/httpdx_tolog_format.rbnvdExploit
- www.vupen.com/english/advisories/2009/3312nvdVendor Advisory
- osvdb.org/60181nvd
- osvdb.org/60182nvd
News mentions
0No linked articles in our index yet.