Approved changes feed: RSS · Atom

cpe:2.3:a:boa:boa:0.94.14rc21:*:*:*:*:*:*:*

part: a version: 0.94.14rc21 update: *

VendorBoa (eb46df32-9ab8-5874-8c4d-5e73ba5144d0)
ProductBoa (cba07e01-4b73-59c1-872a-f80897a739b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gpg/boa purl2cpe 2026-06-01 10:16:13.308883
pkg:github/timmattison/boa purl2cpe 2026-06-01 10:16:13.308885

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4496 vulnerable 2026-06-08 04:51:48.657968 Details available
Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Published: 2010-01-13T20:00:00.000Z
Updated: 2024-08-07T07:01:20.793Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.