CVE-2007-5825

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute…

published November 5, 2007

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or (2) password portion of base64-encoded data on the "Authorization: Basic" HTTP header line.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03723 · 89.8th percentile
Published
2007-11-05T19:00Z
EPSS history
Timeline
  • 05 NOV 19:00Z
    Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute…
    cvelistv5