Description
Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | bidwatcher | 1.3.3-1woody1 | DSA-687-1 |
Advisories 1
- DSA-687-1 bidwatcher - format string Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-200503-06 vendor-advisory
- DSA-687 vendor-advisory