First published: Tue Jun 11 2002(Updated: )
Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
AOL Server | =3.0 | |
AOL Server | =3.1 | |
AOL Server | =3.2 | |
AOL Server | =3.2.1 | |
AOL Server | =3.3 | |
AOL Server | =3.3.1 | |
AOL Server | =3.4 | |
AOL Server | =3.4.1 | |
AOL Server | =3.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2002-0586 is high due to the potential for remote code execution.
To fix CVE-2002-0586, update AOLServer to a patched version beyond 3.4.2.
CVE-2002-0586 affects AOLServer versions 3.0, 3.1, 3.2, 3.2.1, 3.3, 3.3.1, 3.4, 3.4.1, and 3.4.2.
CVE-2002-0586 is a format string vulnerability in the Ns_PdLog function.
Yes, CVE-2002-0586 can be exploited remotely by attackers leveraging the Error or Notice parameters.