NVD

Id
6891  
Name
CVE-2008-7160  
Description
The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-09-10  
Modified Date
2012-10-22  
Seq
2008-7160  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39078 6891 CVE-2008-7160 SUSE-SR:2009:016  View
39079 6891 CVE-2008-7160 http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.9  View
39080 6891 CVE-2008-7160 http://silcnet.org/general/news/news_toolkit.php  View
39081 6891 CVE-2008-7160 DSA-1879  View
39082 6891 CVE-2008-7160 MDVSA-2009:234  View
39083 6891 CVE-2008-7160 [oss-security] 20090831 CVE id request: silc-toolkit  View
39084 6891 CVE-2008-7160 [oss-security] 20090903 Re: CVE id request: silc-toolkit  View
39085 6891 CVE-2008-7160 36194  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44701 JVNDB-2009-005708 SILC Toolkit の silcd におけるスタック領域を上書きされる脆弱性 Secure Internet Live Conferencing (SILC) Toolkit の silcd の internal HTTP server の lib/silchttp/silchttpserver.c の silc_http_server_parse 関数は、%lu フォーマットストリングの間違った使用の不備があるため、スタック領域を上書きされる、および任意のコードを実行される脆弱性が存在します。 CVE-2008-7160 37273 CVE-2008-7160 6891 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005708.html 2009-09-10 2012-12-20 View