CVE-2002-0586 Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via....
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aol server | = 3.0 | No fix listed |
| aol server | = 3.1 | No fix listed |
| aol server | = 3.2 | No fix listed |
| aol server | = 3.2.1 | No fix listed |
| aol server | = 3.3 | No fix listed |
| aol server | = 3.3.1 | No fix listed |
| aol server | = 3.4 | No fix listed |
| aol server | = 3.4.1 | No fix listed |
| aol server | = 3.4.2 | No fix listed |
References
- 20020416 [CERT-intexxia] AOLServer DB Proxy Daemon Format String Vulnerability mailing-list patch vendor-advisory
- sourceforge.net
- aolserver-dbproxy-format-string(8860) patch vdb-entry vendor-advisory
- 4535 patch vdb-entry vendor-advisory