CVE

Id
26366  
CVE No.
CVE-2007-3009  
Status
Candidate  
Description
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267035 26366 CVE-2007-3009 MISC:http://www.appwebserver.org/forum/viewtopic.php?t=969  View
267036 26366 CVE-2007-3009 BID:24454  View
267037 26366 CVE-2007-3009 URL:http://www.securityfocus.com/bid/24454  View
267038 26366 CVE-2007-3009 VUPEN:ADV-2007-2159  View
267039 26366 CVE-2007-3009 URL:http://www.vupen.com/english/advisories/2007/2159  View
267040 26366 CVE-2007-3009 OSVDB:35510  View
267041 26366 CVE-2007-3009 URL:http://www.osvdb.org/35510  View
267042 26366 CVE-2007-3009 SECUNIA:25641  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53437 JVNDB-2007-002129 Fujitsu-Siemens Computers ServerView におけるコマンドを実行される脆弱性 Fujitsu-Seimens Computers ServerView の Web インターフェースの中の DBAsciiAccess CGI スクリプトには、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-3011 26366 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002129.html  View