CVE-2008-1705 Other in n/a

What is CVE-2008-1705?

CVE-2008-1705 is a medium-severity vulnerability in n/a, published on 9 Apr 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.

Weakness: CWE-134

Which versions are affected by CVE-2008-1705?

It affects 1 product.

Products include Ibm Soliddb.

How do I fix CVE-2008-1705?

No fix has been published for CVE-2008-1705 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-1705 being exploited?

There is no known exploitation of CVE-2008-1705 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-2771 Code injection in n/a Critical 10.0
• CVE-2011-1560 Auth bypass in n/a Critical 9.3
• CVE-2011-1208 Null dereference in n/a High 7.8
• CVE-2010-4055 Denial of service in n/a Medium 5.0
• CVE-2010-4056 Null dereference in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pm8g-j2pp-65h6.