CVE-2006-3120

2006-07-3121:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3120

format string vulnerability

osiris

remote attackers

denial of service

arbitrary code

nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.161 Low

EPSS

Percentile

95.9%

JSON

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions.

CPENameOperatorVersion
brian_wotring:osirisbrian wotring osiriseq4.0.8
brian_wotring:osirisbrian wotring osiriseq4.1.1
brian_wotring:osirisbrian wotring osiriseq4.1.3
brian_wotring:osirisbrian wotring osiriseq4.1.8
brian_wotring:osirisbrian wotring osiriseq4.0.5
brian_wotring:osirisbrian wotring osiriseq4.0.0
brian_wotring:osirisbrian wotring osiriseq4.1
brian_wotring:osirisbrian wotring osiriseq4.1.2
brian_wotring:osirisbrian wotring osiriseq4.1.9
brian_wotring:osirisbrian wotring osiriseq4.0.6

CPE	Name	Operator	Version
brian_wotring:osiris	brian wotring osiris	eq	4.0.8
brian_wotring:osiris	brian wotring osiris	eq	4.1.1
brian_wotring:osiris	brian wotring osiris	eq	4.1.3
brian_wotring:osiris	brian wotring osiris	eq	4.1.8
brian_wotring:osiris	brian wotring osiris	eq	4.0.5
brian_wotring:osiris	brian wotring osiris	eq	4.0.0
brian_wotring:osiris	brian wotring osiris	eq	4.1
brian_wotring:osiris	brian wotring osiris	eq	4.1.2
brian_wotring:osiris	brian wotring osiris	eq	4.1.9
brian_wotring:osiris	brian wotring osiris	eq	4.0.6