CVE-2008-6520 - CVE House
Back to Database
Status published Critical CVE-2008-6520

Multiple format string vulnerabilities in the SSI filter in Xitami...

Vulnerability Description

Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a URI that ends in (1) .ssi, (2) .shtm, or (3) .shtml, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6520

Credits & Attribution

No credits recorded in the NVD database.

References

More from imatix

View All →
CVE-2008-6519
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2,...
Critical 10
CVE-2007-5067
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow...
High 7.5
CVE-2002-1965
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4...
Medium 4.3
CVE-2002-1942
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive...
Medium 5
CVE-2001-0391
Xitami 2.5d4 and earlier allows remote attackers to crash the...
Medium 5

Affected Vendor

Affected Software

xitami
Vulnerable Versions:
2.5c2

Timeline

Official Publish: March 25th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.