PT-2001-2650 · Unknown+1 · Libvanessa Logger+1

Published 2001-12-31 · Updated 2008-09-05 · CVE-2001-1566

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Perdition version 0.1.8 libvanessa logger version 0.0.1

Description The issue allows remote attackers to execute arbitrary code via format string specifiers in the vanessa logger log function. This is a result of a format string vulnerability in libvanessa logger.

Recommendations For Perdition version 0.1.8, consider disabling the vanessa logger log function until a patch is available. For libvanessa logger version 0.0.1, restrict access to the vulnerable vanessa logger log function to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1566

Affected Products

Perdition

Libvanessa Logger

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2001-1566 · Security Note
• http://securityfocus.com/bid/3740 · Patch
• https://security-tracker.debian.org/tracker/CVE-2001-1566 · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2001-1566 · Vendor Advisory
• http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2001-1566 · Vendor Advisory
• http://vergenet.net/linux/perdition/string_format.html · Note