medium5.1Public exploit code
CVE-2006-4654
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or "compromise the server" via enc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy Address Book Web Server 1.2 - Remote Format String2006-09-04 · remote · windows · Verified
Impact
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or "compromise the server" via encoded format string specifiers in the query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Efs Software | Easy Address Book Web Server | Version 1.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21959
- http://securityreason.com/securityalert/1529
- http://www.securityfocus.com/archive/1/445262/100/0/threaded
- http://www.securityfocus.com/bid/19842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28752
- http://secunia.com/advisories/21959
- http://securityreason.com/securityalert/1529
- http://www.securityfocus.com/archive/1/445262/100/0/threaded
- http://www.securityfocus.com/bid/19842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28752