CVE-2002-0586

Опубликовано: 18 июн. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html
Patch
Vendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152
http://www.iss.net/security_center/static/8860.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4535
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html
Patch
Vendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152
http://www.iss.net/security_center/static/8860.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4535
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aol:aol_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.1:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.2:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.3:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.3.1:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.4:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.4.1:*:*:*:*:*:*:*

cpe:2.3:a:aol:aol_server:3.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01983

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-65wf-8jvq-4pf5

github

почти 4 года назад