CVEブラウザに戻る

CVE-2005-1738

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1010%

EPSS Percentile12.91th

Published2005年5月24日

Last Modified2026年4月16日

Vulnerability Description

Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access files outside the home directory" and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call.

Affected Platforms (CPE)

📦

Iron Bars Shell

Iron Bars Shell

= 0.3a

📦

Iron Bars Shell

Iron Bars Shell

= 0.3b

📦

Iron Bars Shell

Iron Bars Shell

= 0.3c

References & Advisories

🔗 http://secunia.com/advisories/15473

🔗 http://sourceforge.net/project/shownotes.php?release_id=329340

🔗 http://www.securityfocus.com/bid/13720

🔗 http://secunia.com/advisories/15473

🔗 http://sourceforge.net/project/shownotes.php?release_id=329340

🔗 http://www.securityfocus.com/bid/13720

関連する脆弱性情報

CVE-2005-063610.0

Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execut...

CVE-2005-063510.0

Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.

CVE-2005-000210.0

poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, whi...