Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Boa Webserver 0.94.14rc21 is vulnerable other versions may also be affected.

• http://www.boa.org/
• http://www.securityfocus.com/archive/1/508830
• http://www.securityfocus.com/bid/37718

---

Updated on 2015-03-25