Description
Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in an invalid command.
References
- linuxkissserver-logmessage-format-string(41018) vdb-entry
- 28099 vdb-entry
- http://www.vashnukad.com/
- ADV-2008-0785 vdb-entry
- 29219 third-party-advisory
- 20080305 Vulnerability in Linux Kiss Server v1.2 mailing-list