Unscored severity · published Feb 13, 2008
CVE-2008-0764
Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute…
–
CVSS
7.4%
EPSS
No
On KEV
Description
Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NP
Network Print Server · Larson Software Technology
through 9.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0764
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0764
aluigi.altervista.org
http://aluigi.altervista.org/adv/lstnpsx-adv.txt
Vendor Advisory
http://secunia.com/advisories/28890
www.securityfocus.com
http://www.securityfocus.com/archive/1/487956/100/0/threaded
Exploit
http://www.securityfocus.com/bid/27732
www.vupen.com
http://www.vupen.com/english/advisories/2008/0500
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/40420
More from Network Print Server
–
CVE-2008-0763
Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long…