CVE-2008-6519

2009-03-2518:30:00

CWE-134

[email protected]

web.nvd.nist.gov

cve-2008-6519

xitami web server

format string vulnerability

denial of service

remote attack

arbitrary code

smt kernel

nvd

8 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.037 Low

EPSS

Percentile

91.8%

JSON

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.

Affected configurations

NVD

Node

imatixxitamiMatch2.2a

imatixxitamiMatch2.4

imatixxitamiMatch2.4d7

imatixxitamiMatch2.4d7windows

imatixxitamiMatch2.5

imatixxitamiMatch2.5c2

CPENameOperatorVersion
imatix:xitamiimatix xitamieq2.2a
imatix:xitamiimatix xitamieq2.4
imatix:xitamiimatix xitamieq2.4d7
imatix:xitamiimatix xitamieq2.5
imatix:xitamiimatix xitamieq2.5c2

CPE	Name	Operator	Version
imatix:xitami	imatix xitami	eq	2.2a
imatix:xitami	imatix xitami	eq	2.4
imatix:xitami	imatix xitami	eq	2.4d7
imatix:xitami	imatix xitami	eq	2.5
imatix:xitami	imatix xitami	eq	2.5c2