Vulnerability in Imatix Xitami

CVE-2008-6520

Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string spec…

EPSS: 0.049 (91.1th percentile) — read the EPSS interpretation.

Affected products

Imatix Xitami — versions 2.5c2
N/a — versions n/a

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)