CVEvulnerability
CVE-2005-1394
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
Affected configurations
• esri arcinfo workstation 9.0
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://marc.info/?l=full-disclosure&m=111489411524630&w=2 Mailing List, Third Party Advisory
- http://secunia.com/advisories/15196 Broken Link
- http://securitytracker.com/id?1013852 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 Vendor Advisory
- http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt Patch, Third Party Advisory
- http://marc.info/?l=full-disclosure&m=111489411524630&w=2 Mailing List, Third Party Advisory
- http://secunia.com/advisories/15196 Broken Link
- http://securitytracker.com/id?1013852 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 Vendor Advisory
- http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt Patch, Third Party Advisory