Lucene search
+L

8609 matches found

Prion
Prion
added 2008/03/20 10:44 a.m.18 views

Format string

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

4.3CVSS8.2AI score0.03169EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2008/03/20 10:0 a.m.27 views

CVE-2008-1401

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

7.7AI score0.03169EPSS
SaveExploits1References5
CVE
CVE
added 2008/03/20 10:0 a.m.45 views

CVE-2008-1401

CVE-2008-1401 : The Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector ≤ 6.5.0.828 for Windows is affected by a format-string vulnerability in the URI that is logged, allowing an attacker to trigger arbitrary code execution. Vulnerable component: mghttpd (Net Inspector 6.5.0.828 and ear...

4.3CVSS7.7AI score0.03169EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2008/03/20 12:44 a.m.29 views

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

5.8CVSS7.5AI score0.03222EPSS
SaveExploits1References10
OSV
OSV
added 2008/03/20 12:44 a.m.12 views

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

7.4AI score
SaveExploits0References10
Prion
Prion
added 2008/03/20 12:44 a.m.16 views

Format string

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

5.8CVSS8.1AI score0.03222EPSS
SaveExploits1References10Affected Software1
UbuntuCve
UbuntuCve
added 2008/03/20 12:44 a.m.32 views

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

5.8CVSS6.2AI score0.03222EPSS
SaveExploits1References1
OSV
OSV
added 2008/03/20 12:44 a.m.17 views

DEBIAN-CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

5.8CVSS8AI score0.03222EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2008/03/20 12:0 a.m.55 views

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

5.8CVSS7.4AI score0.03222EPSS
SaveExploits1
Cvelist
Cvelist
added 2008/03/20 12:0 a.m.37 views

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by 1 the astverbose logging API call, or 2 the astmanappend function...

7.4AI score0.03222EPSS
SaveExploits1References10
CVE
CVE
added 2008/03/20 12:0 a.m.75 views

CVE-2008-1333

CVE-2008-1333 affects Asterisk Open Source 1.6.x prior to 1.6.0-beta6. The vulnerability is a format string issue in logging paths (ast_verbose and astman_append) that could allow remote attackers to execute arbitrary code by crafting logging messages. Affected product/version: Asterisk Open Sour...

5.8CVSS7.3AI score0.03222EPSS
SaveExploits1References10Affected Software1
securityvulns
securityvulns
added 2008/03/19 12:0 a.m.58 views

AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Format String Vulnerability in Logger and Manager |...

5.8CVSS0.1AI score0.03222EPSS
SaveExploits1
NVD
NVD
added 2008/03/18 11:44 p.m.28 views

CVE-2008-0989

Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname...

6.9CVSS6.8AI score0.00444EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2008/03/18 11:0 p.m.37 views

CVE-2008-0989

Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname...

8.6AI score0.00444EPSS
SaveExploits1References9
CVE
CVE
added 2008/03/18 11:0 p.m.59 views

CVE-2008-0989

CVE-2008-0989 describes a format-string vulnerability in Apple’s mDNSResponderHelper on Mac OS X 10.5.2. Local attackers can trigger arbitrary code execution or a denial of service by providing a specially crafted local hostname. The vulnerability is confirmed in multiple feeds (NVD entry lists a...

6.9CVSS8.7AI score0.00444EPSS
SaveExploits1References9Affected Software2
NVD
NVD
added 2008/03/17 5:44 p.m.24 views

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

5.4CVSS7.7AI score0.06197EPSS
SaveExploits2References9
Prion
Prion
added 2008/03/17 5:44 p.m.19 views

Format string

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

5.4CVSS8.3AI score0.06197EPSS
SaveExploits2References9Affected Software4
CVE
CVE
added 2008/03/17 5:0 p.m.70 views

CVE-2008-1357

CVE-2008-1357 affects McAfee CMA 3.6.0.574 (Patch 3) and earlier, used with ePolicy Orchestrator 4.0.0 build 1015. The vulnerability is in the logDetail function of applib.dll and stems from a format string issue in the UDP AgentWakeup handling (port 8082) that can leak into the format string spe...

5.4CVSS7.7AI score0.06197EPSS
SaveExploits2References9Affected Software4
securityvulns
securityvulns
added 2008/03/17 12:0 a.m.34 views

MG-Soft Net Inspector multiple security vulnerabilities

Format string vulnerability, directory traversal, DoS conditions...

2.9AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2008/03/17 12:0 a.m.32 views

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on...

0.4AI score
SaveExploits0
Rows per page
Query Builder