CVE-2008-6519
Severity CVSS v4.0:
Pending analysis
Type:
CWE-134
Format String Vulnerability
Publication date:
25/03/2009
Last modified:
09/04/2025
Description
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:imatix:xitami:2.2a:*:*:*:*:*:*:* | ||
| cpe:2.3:a:imatix:xitami:2.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:imatix:xitami:2.4d7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:imatix:xitami:2.4d7:*:windows:*:*:*:*:* | ||
| cpe:2.3:a:imatix:xitami:2.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:imatix:xitami:2.5c2:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.bratax.be/advisories/b013.html
- http://www.securityfocus.com/bid/28603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41644
- https://www.exploit-db.com/exploits/5354
- http://www.bratax.be/advisories/b013.html
- http://www.securityfocus.com/bid/28603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41644
- https://www.exploit-db.com/exploits/5354