CVE-2005-3150
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other...
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
CVE-2005-3150- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
CVE-2005-3150- Updated
- 2026-11-02
EUVDEUVD-2005-3150 No score
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
EUVD-2005-3150- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2994-xw3p-6772 No score
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other...
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
GHSA-2994-xw3p-6772- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
CVE-2005-3150- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3150 No score
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.
- Record
DEBIAN-CVE-2005-3150- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
weexDebian:12 |
before 2.6.1-6sarge1 | 2.6.1-6sarge1 |
weexDebian:13 |
before 2.6.1-6sarge1 | 2.6.1-6sarge1 |
weexDebian:14 |
before 2.6.1-6sarge1 | 2.6.1-6sarge1 |
weexDebian:3.1 |
before 2.6.1-6sarge1, plus listed versions 2.6.1-6 |
2.6.1-6sarge1 |
weexDebian:3.0 |
before 2.6.1-4woody2, plus listed versions 2.6.1-4woody1 |
2.6.1-4woody2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3150 is a high vulnerability (CVSS 7.5) in Weex, published October 5, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. Fixed in weex 2.6.1-6sarge1.