CVE-2005-1121

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.0310%

EPSS Percentile37.26th

Published2005年5月2日

Last Modified2026年4月16日

Vulnerability Description

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow attackers to execute arbitrary code via a URL.

Affected Platforms (CPE)

📦

Igor Khasilev

Oops Proxy Server

= 1.4.22

📦

Igor Khasilev

Oops Proxy Server

= 1.5.19

📦

Igor Khasilev

Oops Proxy Server

= 1.5.53

💻

Gentoo

Linux

All versions

References & Advisories

🔗 http://rst.void.ru/papers/advisory24.txt

🔗 http://security.gentoo.org/glsa/glsa-200505-02.xml

🔗 http://www.debian.org/security/2005/dsa-726

🔗 http://www.securityfocus.com/bid/13172

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20191

🔗 http://rst.void.ru/papers/advisory24.txt

🔗 http://security.gentoo.org/glsa/glsa-200505-02.xml

🔗 http://www.debian.org/security/2005/dsa-726

Vulnerability Description

Affected Platforms (CPE)

Oops Proxy Server

Oops Proxy Server

Oops Proxy Server

Linux

References & Advisories

相關漏洞威脅