CVE-2008-7160 - CVE House
Back to Database
Status published Medium CVE-2008-7160

The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server...

Vulnerability Description

The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7160

Credits & Attribution

No credits recorded in the NVD database.

References

More from silcnet

View All →
CVE-2009-3163
Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live...
High 7.5
CVE-2009-3051
Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live...
High 7.5
CVE-2008-7159
The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing...
Medium 5.8

Affected Vendor

Affected Software

silc toolkit
Vulnerable Versions:
0, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6

Timeline

Official Publish: September 10th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.