Published: 02/05/2005 Updated: 11/07/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and previous versions, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow malicious users to execute arbitrary code via a URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
igor khasilev oops proxy server 1.4.22
igor khasilev oops proxy server 1.5.19
igor khasilev oops proxy server 1.5.53
gentoo linux

A format string vulnerability has been discovered in the MySQL/PgSQL authentication module of Oops, a caching HTTP proxy server written for performance For the stable distribution (woody) this problem has been fixed in version 1519cvs20010818-01woody1 For the unstable distribution (sid) this problem will be fixed soon We recommend that you u ...

NVD-CWE-Other http://www.securityfocus.com/bid/13172 http://rst.void.ru/papers/advisory24.txt http://security.gentoo.org/glsa/glsa-200505-02.xml http://www.debian.org/security/2005/dsa-726 https://exchange.xforce.ibmcloud.com/vulnerabilities/20191 https://nvd.nist.gov https://www.debian.org/security/./dsa-726

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-1121

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect