CVE-2008-1705

Description

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/41485

http://www.vupen.com/english/advisories/2008/1038

http://www.securityfocus.com/bid/28468

http://www.securityfocus.com/archive/1/490129/100/0/threaded

http://securitytracker.com/id?1019721

http://secunia.com/advisories/29512

http://aluigi.altervista.org/adv/soliduro-adv.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS