ByteOS Network

NVD Vulnerability Details :

CVE-2008-0764

Modified

Source-cve@mitre.org

Published At-13 Feb, 2008 | 21:00

Updated At-15 Oct, 2018 | 22:02

Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

larson_software_technology>>network_print_server>>Versions up to 9.4.2(inclusive)

cpe:2.3:a:larson_software_technology:network_print_server:*:build_105:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-134	Primary	nvd@nist.gov

CWE ID: CWE-134

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://aluigi.altervista.org/adv/lstnpsx-adv.txt	cve@mitre.org	N/A
http://secunia.com/advisories/28890	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/archive/1/487956/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/27732	cve@mitre.org	Exploit
http://www.vupen.com/english/advisories/2008/0500	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/40420	cve@mitre.org	N/A