CVE-2008-6519 - CVE House
Back to Database
Status published Critical CVE-2008-6519

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2,...

Vulnerability Description

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6519

Credits & Attribution

No credits recorded in the NVD database.

References

More from imatix

View All →
CVE-2008-6520
Multiple format string vulnerabilities in the SSI filter in Xitami...
Critical 10
CVE-2007-5067
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow...
High 7.5
CVE-2002-1965
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4...
Medium 4.3
CVE-2002-1942
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive...
Medium 5
CVE-2001-0391
Xitami 2.5d4 and earlier allows remote attackers to crash the...
Medium 5

Affected Vendor

Affected Software

xitami
Vulnerable Versions:
2.2a, 2.4, 2.4d7, 2.5, 2.5c2

Timeline

Official Publish: March 25th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.