Lucene search
HistoryMar 20, 2008 - 10:44 a.m.
CVE-2008-1401
net inspector
mghttpd
format string vulnerability
remote code execution
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.7 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.1%
Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file.
Affected configurations
Node
mg-softnet_inspectorRange≤windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| mg-soft:net_inspector | mg-soft net inspector | le | windows |
Related
prion
prion
Format string
2008-03-20 10:44:00
nvd
nvd
CVE-2008-1401
2008-03-20 10:44:00
cvelist
cvelist
CVE-2008-1401
2008-03-20 10:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.7 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.1%
Related for CVE-2008-1401