NVD

Id
57341  
Name
CVE-2007-5265  
Description
Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2011-03-07  
Seq
2007-5265  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292882 57341 CVE-2007-5265 http://aluigi.altervista.org/adv/dawnfs-adv.txt  View
292883 57341 CVE-2007-5265 http://forums.dawnoftime.org/viewtopic.php?t=2102  View
292884 57341 CVE-2007-5265 3201  View
292885 57341 CVE-2007-5265 20071005 Format string in The Dawn of Time 1.69s beta4  View
292886 57341 CVE-2007-5265 25944  View
292887 57341 CVE-2007-5265 ADV-2007-3418  View
292888 57341 CVE-2007-5265 dawntime-httpauthentication-format-string(36973)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54054 JVNDB-2007-002746 Dawn of Time の websrv.cpp におけるフォーマットストリングの脆弱性 Dawn of Time の websrv.cpp には、フォーマットストリングの脆弱性が存在します。 CVE-2007-5265 28620 CVE-2007-5265 57341 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002746.html 2007-10-01 2012-06-26 View