CVE-2008-0755
published 2008-02-13CVE-2008-0755: Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI…
PriorityP348high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
4.92%
91.0th percentile
Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cyan_soft | cyanprintip_basic | <= 4.10.1030 | — |
| cyan_soft | cyanprintip_easy_opi | <= 4.10.1030 | — |
| cyan_soft | cyanprintip_professional | <= 4.10.1030 | — |
| cyan_soft | cyanprintip_standard | <= 4.10.940 | — |
| cyan_soft | cyanprintip_workstation | <= 4.10.836 | — |
| cyan_soft | opium4_opi_server | <= 4.10.1028 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://aluigi.altervista.org/adv/cyanuro-adv.txthttp://secunia.com/advisories/28870http://www.securityfocus.com/archive/1/487955/100/0/threadedhttp://www.securityfocus.com/bid/27728http://www.securityfocus.com/bid/27734http://www.vupen.com/english/advisories/2008/0498http://aluigi.altervista.org/adv/cyanuro-adv.txthttp://secunia.com/advisories/28870http://www.securityfocus.com/archive/1/487955/100/0/threadedhttp://www.securityfocus.com/bid/27728http://www.securityfocus.com/bid/27734http://www.vupen.com/english/advisories/2008/0498
2008-02-13
Published