CVE-2008-1206 in Linux Kiss Server

Summary

Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in an invalid command.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 03/07/2008
• Disclosure: 03/07/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-41373
• CPE: ready
• CWE: CWE-134 (Confirmed)
• CVSS: 7.3
• EPSS: 0.05571
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-1206
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-1206
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-1206/