CVE-2007-3009

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.23%

Published

Jun 4, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBMbedthis AppWeb 2.2.2 - URL Protocol Format String

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.

Affected Products (1)

mbedthis_software · mbedthis_appweb_http_servervulnerable

References (10)

http://secunia.com/advisories/25641

http://www.appwebserver.org/forum/viewtopic.php?t=969

http://www.osvdb.org/35510

http://www.securityfocus.com/bid/24454

http://www.vupen.com/english/advisories/2007/2159

http://secunia.com/advisories/25641

http://www.appwebserver.org/forum/viewtopic.php?t=969

http://www.osvdb.org/35510

http://www.securityfocus.com/bid/24454

http://www.vupen.com/english/advisories/2007/2159

KEV Catalog EPSS Scores Vendors All CVEs