Описание
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:gnu:cfengine:1.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cfengine:1.5.3-4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:cfengine:1.6:a10:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00921
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
EPSS
Процентиль: 76%
0.00921
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other