CVE-2007-6625

CWE-134 — Uncontrolled Format String3 documents3 sources
Severity
5.0MEDIUM
EPSS
4.0%
top 11.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Identity Manager
Timeline
PublishedJan 4
Latest updateMay 1

Description

The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: support.novell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3725-x3x8-r7jq: The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3↗2022-05-01
▶
CVEList
CVE-2007-6625: The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3↗2008-01-04
▶
CVE-2007-6625 (MEDIUM CVSS 5) | The Platform Service Process (asamp | cvebase.io