CVE-2012-6123

Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack." > MITRE Terms of Use apply – see LICENSE‑MITRE.txt