7.5

CVE-2005-0158

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
BidwatcherBidwatcher Version1.0.5
BidwatcherBidwatcher Version1.1.2
BidwatcherBidwatcher Version1.1.7
BidwatcherBidwatcher Version1.1.8
BidwatcherBidwatcher Version1.1.9
BidwatcherBidwatcher Version1.1.9.1
BidwatcherBidwatcher Version1.1.9.2
BidwatcherBidwatcher Version1.2.0
BidwatcherBidwatcher Version1.3.0_beta
BidwatcherBidwatcher Version1.3.1
BidwatcherBidwatcher Version1.3.2
BidwatcherBidwatcher Version1.3.3
BidwatcherBidwatcher Version1.3.4
BidwatcherBidwatcher Version1.3.5
BidwatcherBidwatcher Version1.3.6
BidwatcherBidwatcher Version1.3.7
BidwatcherBidwatcher Version1.3.8
BidwatcherBidwatcher Version1.3.9
BidwatcherBidwatcher Version1.3.10
BidwatcherBidwatcher Version1.3.11
BidwatcherBidwatcher Version1.3.12
BidwatcherBidwatcher Version1.3.13
BidwatcherBidwatcher Version1.3.14
BidwatcherBidwatcher Version1.3.15
BidwatcherBidwatcher Version1.3.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.91% 0.771
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2005/dsa-687
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200503-06.xml
Patch