CVE-2001-1562

Description

Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.

Affected products

• BSD / nvi1.79 – 1.79

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=100526142205694&w=2
• VENDOR_ADVISORYhttp://www.debian.org/security/2001/dsa-085
• MISChttp://www.securityfocus.com/bid/3456
• MISChttp://www.iss.net/security_center/static/7317.php