7.5
CVE-2005-0188
- EPSS 2.69%
- Veröffentlicht 06.10.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:10:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginFormat string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.69% | 0.839 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=109710974324742&w=2
http://marc.info/?l=bugtraq&m=110616363415176&w=2
http://www.ngssoftware.com/advisories/athoc-01full.txt
http://www.securityfocus.com/bid/11341
https://exchange.xforce.ibmcloud.com/vulnerabilities/17628