CVE-2005-4846 Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| spey | = 0.3.3 | No fix listed |
References
- sourceforge.net
- spey.cvs.sourceforge.net exploit
- spey.cvs.sourceforge.net
- 21327 vdb-entry