CVE-2008-1401 Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string sp...
MediumCVSS 4.3
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mg-soft net inspector | <= windows | No fix listed |
References
- aluigi.altervista.org
- 29421 third-party-advisory vendor-advisory
- 20080317 Multiple vulnerabilities in Net Inspector 6.5.0.828 mailing-list
- 28266 vdb-entry
- 5269 exploit