CVE Feed

    Dashboard / CVE / CVE-2008-0755

    CVE-2008-0755

    Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request.

    Published:Feb 13, 2008
    Last Modified:Apr 23, 2026
    EPS:Feb 13, 2008
    EPSS Score:0.17082
    CVSS Score:7.5

    Affected Products

    Vendor
    Cyan Soft
    Product
    Cyanprintip Basic
    Vendor
    Cyan Soft
    Product
    Cyanprintip Easy Opi
    Vendor
    Cyan Soft
    Product
    Cyanprintip Professional
    Vendor
    Cyan Soft
    Product
    Cyanprintip Standard
    Vendor
    Cyan Soft
    Product
    Cyanprintip Workstation
    Vendor
    Cyan Soft
    Product
    Opium4 Opi Server

    Exploits

    http://www.securityfocus.com/bid/27728http://www.securityfocus.com/bid/27728https://www.exploit-db.com/exploits/31148

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High