CVE-2008-0764

Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
larson_software_technologynetwork_print_server
𝑥
≤ 9.4.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://aluigi.altervista.org/adv/lstnpsx-adv.txt
http://secunia.com/advisories/28890
http://www.securityfocus.com/archive/1/487956/100/0/threaded
http://www.securityfocus.com/bid/27732
http://www.vupen.com/english/advisories/2008/0500
https://exchange.xforce.ibmcloud.com/vulnerabilities/40420
http://aluigi.altervista.org/adv/lstnpsx-adv.txt
http://secunia.com/advisories/28890
http://www.securityfocus.com/archive/1/487956/100/0/threaded
http://www.securityfocus.com/bid/27732
http://www.vupen.com/english/advisories/2008/0500
https://exchange.xforce.ibmcloud.com/vulnerabilities/40420