CVE-2005-1121

Published: May 2, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow attackers to execute arbitrary code via a URL.

Affected (4)

Products: Igor Khasilev: Oops Proxy Server · Gentoo: Linux

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Igor Khasilev Oops Proxy Server	Version 1.4.22
Igor Khasilev Oops Proxy Server	Version 1.5.19
Igor Khasilev Oops Proxy Server	Version 1.5.53

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Gentoo Linux	All versions

References (10)

http://rst.void.ru/papers/advisory24.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200505-02.xml

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-726

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/13172

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/20191

Source: cve@mitre.org

http://rst.void.ru/papers/advisory24.txt