CVE-2005-0687

2005-03-0805:00:00

mitre

web.nvd.nist.gov

cve-2005-0687

hashcash

format string vulnerability

denial of service

memory consumption

remote attackers

execute arbitrary code

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.018

Percentile

88.2%

JSON

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.

Affected configurations

Nvd

Node

hashcashhashcashMatch1.14

hashcashhashcashMatch1.15

hashcashhashcashMatch1.16

VendorProductVersionCPE
hashcashhashcash1.14cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*
hashcashhashcash1.15cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*
hashcashhashcash1.16cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hashcash	hashcash	1.14	cpe:2.3:a:hashcash:hashcash:1.14:::::::*
hashcash	hashcash	1.15	cpe:2.3:a:hashcash:hashcash:1.15:::::::*
hashcash	hashcash	1.16	cpe:2.3:a:hashcash:hashcash:1.16:::::::*