CVEvulnerability
CVE-2008-0764
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.
Affected configurations
• larson software technology network print server (<= 9.4.2)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://aluigi.altervista.org/adv/lstnpsx-adv.txt aluigi.altervista.org
- http://secunia.com/advisories/28890 Vendor Advisory
- http://www.securityfocus.com/archive/1/487956/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27732 Exploit
- http://www.vupen.com/english/advisories/2008/0500 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40420 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/lstnpsx-adv.txt aluigi.altervista.org
- http://secunia.com/advisories/28890 Vendor Advisory
- http://www.securityfocus.com/archive/1/487956/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27732 Exploit
- http://www.vupen.com/english/advisories/2008/0500 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40420 exchange.xforce.ibmcloud.com