CVEvulnerability
CVE-2010-2271
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-134
Description
Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter.
Affected configurations
• accoria rock web server 1.4.7
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://www.ioactive.com/pdfs/AccoriaWebServer.pdf Exploit
- http://www.kb.cert.org/vuls/id/245081 US Government Resource
- http://www.ioactive.com/pdfs/AccoriaWebServer.pdf Exploit
- http://www.kb.cert.org/vuls/id/245081 US Government Resource