OpenVMPS Logging Function Format String

high Nessus Plugin ID 20067

Language:

Synopsis

The remote host is running a service that is affected by a format string vulnerability.

Description

The remote host appears to be running OpenVMPS, an open source VLAN Management Policy Server (VMPS).

There is a format string vulnerability in versions of OpenVMPS up to and including 1.3 that may allow remote attackers to crash the server or execute code on the affected host subject to the privileges under which the server operates, possibly root.

Solution

Use a firewall to filter access to the affected port.

Plugin Details

Severity: High

ID: 20067

File Name: openvmps_format_string.nasl

Version: 1.17

Type: remote

Family: Gain a shell remotely

Published: 10/20/2005

Updated: 7/16/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:openvmps:openvmps

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 10/10/2005

Reference Information

CVE: CVE-2005-4714

BID: 15072

Detections

Analytics