| Package | Affected versions | Patched versions |
|---|---|---|
| xitami | = 2.2a= 2.4= 2.4d7= 2.5= 2.5c2 |
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free