NVD

Id
50266  
Name
CVE-2009-3051  
Description
Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-10  
Modified Date
2012-10-22  
Seq
2009-3051  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254451 50266 CVE-2009-3051 SUSE-SR:2009:016  View
254452 50266 CVE-2009-3051 http://silcnet.org/docs/changelog/SILC%20Client%201.1.8  View
254453 50266 CVE-2009-3051 http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10  View
254454 50266 CVE-2009-3051 http://silcnet.org/docs/release/SILC%20Client%201.1.8  View
254455 50266 CVE-2009-3051 http://silcnet.org/general/news/news_client.php  View
254456 50266 CVE-2009-3051 http://silcnet.org/general/news/news_toolkit.php  View
254457 50266 CVE-2009-3051 DSA-1879  View
254458 50266 CVE-2009-3051 MDVSA-2009:234  View
254459 50266 CVE-2009-3051 MDVSA-2009:235  View
254460 50266 CVE-2009-3051 [oss-security] 20090831 CVE id request: silc-toolkit  View
254461 50266 CVE-2009-3051 [oss-security] 20090903 Re: CVE id request: silc-toolkit  View
254462 50266 CVE-2009-3051 35940  View
254463 50266 CVE-2009-3051 ADV-2009-2150  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45260 JVNDB-2009-006267 Secure Internet Live Conferencing (SILC) Toolkit などの lib/silcclient/client_entry.c におけるフォーマットストリングの脆弱性 Secure Internet Live Conferencing (SILC) Toolkit および SILC Client の lib/silcclient/client_entry.c は、以下の関数に関する不備があるため、フォーマットストリングの脆弱性が存在します。 CVE-2009-3051 40482 CVE-2009-3051 50266 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006267.html 2009-09-10 2012-12-20 View