CVE-2005-2410 Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier,....
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME networkmanager | < 0.4.1 | 0.4.1 |
References
- FEDORA-2005-680 third-party-advisory vendor-advisory
- [gnome-networkmanager-list] 20050728 format string bug in nm_info_handler mailing-list vendor-advisory
- [gnome-networkmanager-list] 20050729 Re: format string bug in nm_info_handler mailing-list vendor-advisory