CVE-2008-6519

2009-03-2518:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.