← back
CVE-2008-6519

CVE-2008-6519

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.9%
exploitation probability
5.9%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.