CVE-2008-1705

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.

Link	Resource
http://aluigi.altervista.org/adv/soliduro-adv.txt
http://aluigi.org/poc/soliduro.zip	Exploit
http://securitytracker.com/id?1019721
http://secunia.com/advisories/29512
http://www.securityfocus.com/bid/28468
http://www.vupen.com/english/advisories/2008/1038
https://exchange.xforce.ibmcloud.com/vulnerabilities/41485
http://www.securityfocus.com/archive/1/490129/100/0/threaded

Configuration 1

cpe:2.3:a:ibm:soliddb:06.00.1018:*:*:*:*:*:*:*

---

Published : 2008-04-09 07:05

Updated : 2018-10-11 08:36

---

NVD link : CVE-2008-1705

Mitre link : CVE-2008-1705

No products.

CWE-134

Use of Externally-Controlled Format String