Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aol_server | Aol | 3.0 (including) | 3.0 (including) |
| Aol_server | Aol | 3.1 (including) | 3.1 (including) |
| Aol_server | Aol | 3.2 (including) | 3.2 (including) |
| Aol_server | Aol | 3.2.1 (including) | 3.2.1 (including) |
| Aol_server | Aol | 3.3 (including) | 3.3 (including) |
| Aol_server | Aol | 3.3.1 (including) | 3.3.1 (including) |
| Aol_server | Aol | 3.4 (including) | 3.4 (including) |
| Aol_server | Aol | 3.4.1 (including) | 3.4.1 (including) |
| Aol_server | Aol | 3.4.2 (including) | 3.4.2 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=533141\u0026group_id=3152\u0026atid=303152
- http://www.iss.net/security_center/static/8860.php
- http://www.securityfocus.com/bid/4535
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=533141\u0026group_id=3152\u0026atid=303152
- http://www.iss.net/security_center/static/8860.php
- http://www.securityfocus.com/bid/4535