CVE-2002-0598 Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server ba...
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foundstone fscan | = 1.12 | No fix listed |
References
- 20020419 KPMG-2002014: Foundstone Fscan Format String Bug mailing-list vendor-advisory
- www.foundstone.com patch vendor-advisory
- fscan-banner-format-string(8895) patch vdb-entry vendor-advisory
- 4549 patch vdb-entry vendor-advisory