CVE-2008-0764 Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format st...
HighCVSS 10.0
EPSS 7.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| larson software technology network print server | <= 9.4.2 | No fix listed |
References
- aluigi.altervista.org
- 28890 third-party-advisory vendor-advisory
- 20080211 Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 mailing-list
- 27732 exploit vdb-entry
- ADV-2008-0500 vdb-entry
- networkprintserver-logging-format-string(40420) vdb-entry