OSVDB ID: 22287 Title: SMS Server Tools Logging Function Local Format String |
Info |
|
|
Dates |
||||
|
|
Description |
SMS Server Tools contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered by the logging of malicious user input in some error messages. It is possible that the flaw may allow arbitrary code execution with increased privileges resulting in a loss of integrity. |
Classification |
Location:
Local Access Required,
Local / Remote,
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|