{"api_version":"1","generated_at":"2026-07-23T07:13:29+00:00","cve":"CVE-2008-1705","urls":{"html":"https://cve.report/CVE-2008-1705","api":"https://cve.report/api/cve/CVE-2008-1705.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-1705","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-1705"},"summary":{"title":"CVE-2008-1705","description":"Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-04-09 19:05:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-134","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","name":"http://aluigi.altervista.org/adv/soliduro-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","name":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1019721","name":"http://securitytracker.com/id?1019721","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - IBM solidDB Format String and Memory Errors Let Remote Users Execute Arbitrary Code or Deny Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://aluigi.org/poc/soliduro.zip","name":"http://aluigi.org/poc/soliduro.zip","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Direct Link","mime":"application/zip","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1038","name":"http://www.vupen.com/english/advisories/2008/1038","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/29512","name":"http://secunia.com/advisories/29512","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM solidDB Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/28468","name":"http://www.securityfocus.com/bid/28468","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM solidDB Format String Vulnerability and Multiple Denial of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1705","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1705","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"1705","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"soliddb","cpe6":"06.00.1018","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:32:01.262Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.org/poc/soliduro.zip"},{"name":"ibm-soliddb-solid-format-string(41485)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485"},{"name":"29512","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29512"},{"name":"1019721","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019721"},{"name":"28468","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/28468"},{"name":"20080326 Multiple vulnerabilities in solidDB 06.00.1018","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt"},{"name":"ADV-2008-1038","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1038"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-03-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://aluigi.org/poc/soliduro.zip"},{"name":"ibm-soliddb-solid-format-string(41485)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485"},{"name":"29512","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29512"},{"name":"1019721","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019721"},{"name":"28468","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/28468"},{"name":"20080326 Multiple vulnerabilities in solidDB 06.00.1018","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt"},{"name":"ADV-2008-1038","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1038"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-1705","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://aluigi.org/poc/soliduro.zip","refsource":"MISC","url":"http://aluigi.org/poc/soliduro.zip"},{"name":"ibm-soliddb-solid-format-string(41485)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485"},{"name":"29512","refsource":"SECUNIA","url":"http://secunia.com/advisories/29512"},{"name":"1019721","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019721"},{"name":"28468","refsource":"BID","url":"http://www.securityfocus.com/bid/28468"},{"name":"20080326 Multiple vulnerabilities in solidDB 06.00.1018","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded"},{"name":"http://aluigi.altervista.org/adv/soliduro-adv.txt","refsource":"MISC","url":"http://aluigi.altervista.org/adv/soliduro-adv.txt"},{"name":"ADV-2008-1038","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1038"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-1705","datePublished":"2008-04-09T19:00:00.000Z","dateReserved":"2008-04-09T00:00:00.000Z","dateUpdated":"2024-08-07T08:32:01.262Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-04-09 19:05:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-134","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:soliddb:06.00.1018:*:*:*:*:*:*:*","matchCriteriaId":"979423E3-2025-4EB2-B1C5-5C6B6A39B745"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"1705","Ordinal":"1","Title":"CVE-2008-1705","CVE":"CVE-2008-1705","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"1705","Ordinal":"1","NoteData":"Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.","Type":"Description","Title":"CVE-2008-1705"},{"CveYear":"2008","CveId":"1705","Ordinal":"2","NoteData":"2008-04-09","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"1705","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}