Lucene search

[email protected]CVE-2001-1566

HistoryDec 31, 2001 - 5:00 a.m.

CVE-2001-1566

2001-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-1566

vulnerability

libvanessa_logger

perdition 0.1.8

remote code execution

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.7%

JSON

Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.

CPENameOperatorVersion
verge:perditionverge perditioneq0.1.8
vanessa:vanessa_loggervanessa vanessa loggereq0.0.1

CPE	Name	Operator	Version
verge:perdition	verge perdition	eq	0.1.8
vanessa:vanessa_logger	vanessa vanessa logger	eq	0.0.1

References

archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html

www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html

www.securityfocus.com/bid/3740

www.vergenet.net/linux/perdition/string_format.html

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.7%

JSON

Related for CVE-2001-1566

debiancve1