CVE-2009-0364

Format string vulnerability in the minicalendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors...

WebCit Mini_Calendar组件格式串漏洞

BUGTRAQ ID: 34206 CVECAN ID: CVE-2009-0364 WebCit是Citadel邮件和协作组件所使用的基于WEB的用户界面。 webcit模块calendarview.c文件的embeddableminicalendar函数中存在格式串漏洞，远程攻击者可以通过向服务器提交特制的URL请求导致注入并执行任意指令。 Citadel/UX webcit 7.39 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1752-1）以及相应补丁: DSA-1752-1：New webcit packages fix...

CVE-2009-0364

CVE-2009-0364 is a format-string vulnerability in the WebCit mini_calendar component of Citadel.org WebCit, affecting WebCit 7.22 and other versions prior to 7.39. The issue allows remote attackers to execute arbitrary code via unspecified vectors. Public sources confirm this as a remote code exe...

CVE-2009-0364

Removed by vendor...