Format string

2019-03-2601:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command “prompt” sets the (user controlled) shell’s prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses.

CPENameOperatorVersion
integrity_rtoseq5.0.4

CPE	Name	Operator	Version
	integrity_rtos	eq	5.0.4

References

github.com/bl4ckic3/GHS-Bugs

www.ghs.com/products/rtos/integrity.html