Lucene search

K
cve[email protected]CVE-2008-7074
HistoryAug 25, 2009 - 10:30 a.m.

CVE-2008-7074

2009-08-2510:30:00
CWE-134
web.nvd.nist.gov
24
cve
2008
7074
format string vulnerability
memecode software
i.scribe
smtp
denial of service
execute arbitrary code
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled “when displaying the signon message.”

Affected configurations

NVD
Node
memcodei.scribeMatch1.88
OR
memcodei.scribeMatch1.89
OR
memcodei.scribeMatch1.90
OR
memcodei.scribeMatch2.00alpha1
OR
memcodei.scribeMatch2.00alpha2
OR
memcodei.scribeMatch2.00alpha3
OR
memcodei.scribeMatch2.00alpha4
OR
memcodei.scribeMatch2.00beta10
OR
memcodei.scribeMatch2.00beta11
OR
memcodei.scribeMatch2.00beta6
OR
memcodei.scribeMatch2.00beta7
OR
memcodei.scribeMatch2.00beta8
OR
memcodei.scribeMatch2.00beta9

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Related for CVE-2008-7074