CVE-2001-0609

Опубликовано: 02 авг. 2001

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2576
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6364
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2576
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6364
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:infodrom:cfingerd:*:*:*:*:*:*:*:*

Версия до 1.4.3 (включая)

EPSS

Процентиль: 93%

0.0991

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-193

Связанные уязвимости

GHSA-fppm-3x24-27q8