CVE-2005-0523

2005-05-0204:00:00

mitre

web.nvd.nist.gov

prozilla

format string vulnerability

remote code execution

cve-2005-0523

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.057

Percentile

93.5%

JSON

Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.

Affected configurations

Nvd

Node

prozillaprozilla_download_acceleratorMatch1.3.0

prozillaprozilla_download_acceleratorMatch1.3.1

prozillaprozilla_download_acceleratorMatch1.3.2

prozillaprozilla_download_acceleratorMatch1.3.3

prozillaprozilla_download_acceleratorMatch1.3.4

prozillaprozilla_download_acceleratorMatch1.3.5

prozillaprozilla_download_acceleratorMatch1.3.5.1

prozillaprozilla_download_acceleratorMatch1.3.5.2

prozillaprozilla_download_acceleratorMatch1.3.6

VendorProductVersionCPE
prozillaprozilla_download_accelerator1.3.0cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.0:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.1cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.1:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.2cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.2:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.3cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.3:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.4cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.4:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.5cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.5.1cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.1:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.5.2cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.2:*:*:*:*:*:*:*
prozillaprozilla_download_accelerator1.3.6cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
prozilla	prozilla_download_accelerator	1.3.0	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.0:::::::*
prozilla	prozilla_download_accelerator	1.3.1	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.1:::::::*
prozilla	prozilla_download_accelerator	1.3.2	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.2:::::::*
prozilla	prozilla_download_accelerator	1.3.3	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.3:::::::*
prozilla	prozilla_download_accelerator	1.3.4	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.4:::::::*
prozilla	prozilla_download_accelerator	1.3.5	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5:::::::*
prozilla	prozilla_download_accelerator	1.3.5.1	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.1:::::::*
prozilla	prozilla_download_accelerator	1.3.5.2	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.5.2:::::::*
prozilla	prozilla_download_accelerator	1.3.6	cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.6:::::::*