PT-2005-1256
CVE-2005-0158
·
Published
2005-02-18
·
Updated
2008-09-05
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
bidwatcher versions prior to 1.3.17
Description
The issue allows remote malicious web servers, such as those from eBay or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses. This is due to a format string vulnerability.
Recommendations
For versions prior to 1.3.17, update to version 1.3.17 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾