CVE-2007-3009 - CVE House
Back to Database
Status published Medium CVE-2007-3009

Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb...

Vulnerability Description

Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3009

Credits & Attribution

No credits recorded in the NVD database.

References

More from mbedthis software

View All →
CVE-2007-3008
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which...
Medium 4.3
CVE-2004-2317
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2...
Medium 5
CVE-2004-2315
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to...
Medium 5
CVE-2004-2213
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to...
Medium 5

Affected Vendor

mbedthis software

View all reports →

Affected Software

mbedthis appweb http server
Vulnerable Versions:
2.0.5-4

Timeline

Official Publish: June 4th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.