Lucene search

K
nvd[email protected]NVD:CVE-2005-3150
HistoryOct 05, 2005 - 10:02 p.m.

CVE-2005-3150

2005-10-0522:02:00
web.nvd.nist.gov
3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.007

Percentile

81.1%

Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.

Affected configurations

Nvd
Node
weexweexMatch2.6.1
OR
weexweexMatch2.6.1.5
VendorProductVersionCPE
weexweex2.6.1cpe:2.3:a:weex:weex:2.6.1:*:*:*:*:*:*:*
weexweex2.6.1.5cpe:2.3:a:weex:weex:2.6.1.5:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.007

Percentile

81.1%