Security Advisory

CVE-2019-7712

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-26 01:00:37

Last updated 2024-08-04 20:54:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf() without a proper check. An attacker may thus forge a path containing format string modifiers to get a custom format string evaluated. This results in an information leak of memory addresses.

← Browse all CVEs View on cve.org ↗