Lucene search

[email protected]CVE-2001-1215

HistoryDec 20, 2001 - 5:00 a.m.

CVE-2001-1215

2001-12-2005:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

infosec

vulnerability

pfinger

remote code execution

cve-2001-1215

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file.

CPENameOperatorVersion
michael_baumer:pfingermichael baumer pfingereq0.7.6
michael_baumer:pfingermichael baumer pfingereq0.7.7
michael_baumer:pfingermichael baumer pfingereq0.7.5

CPE	Name	Operator	Version
michael_baumer:pfinger	michael baumer pfinger	eq	0.7.6
michael_baumer:pfinger	michael baumer pfinger	eq	0.7.7
michael_baumer:pfinger	michael baumer pfinger	eq	0.7.5

References

www.iss.net/security_center/static/7742.php

www.securityfocus.com/archive/1/246656

www.securityfocus.com/bid/3725

www.xelia.ch/unix/pfinger/ChangeLog

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON