GCVE - cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Silcnet (`628ba5ed-8cac-5fe9-aa42-344a4a55022b`)
Product	Silc Toolkit (`4dad6569-39b2-5dbc-99d3-a2e93de690b7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3163`	vulnerable	2026-06-08 04:51:32.513061	Details available Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, and (4) silc_client_command_users. Published: 2009-09-10T21:00:00.000Z Updated: 2024-08-07T06:14:56.386Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36193 http://www.openwall.com/lists/oss-security/2009/08/31/5 http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10 http://secunia.com/advisories/36614 http://www.mandriva.com/security/advisories?name=MDVSA-2009:235	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3051`	vulnerable	2026-06-08 04:51:32.137851	Details available Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions. Published: 2009-09-10T18:00:00.000Z Updated: 2024-08-07T06:14:56.456Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/2150 http://www.openwall.com/lists/oss-security/2009/08/31/5 http://secunia.com/advisories/36134 http://silcnet.org/general/news/news_client.php http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-7160`	vulnerable	2026-06-08 04:51:05.741363	Details available The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string. Published: 2009-09-10T21:00:00.000Z Updated: 2024-08-07T11:56:14.480Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36625 http://www.openwall.com/lists/oss-security/2009/08/31/5 http://www.securityfocus.com/bid/36194 http://secunia.com/advisories/36614 http://www.openwall.com/lists/oss-security/2009/09/03/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-7159`	vulnerable	2026-06-08 04:51:05.736521	Details available The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string. Published: 2009-09-10T21:00:00.000Z Updated: 2024-08-07T11:56:14.416Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36625 https://exchange.xforce.ibmcloud.com/vulnerabilities/53477 http://www.openwall.com/lists/oss-security/2009/08/31/5 http://secunia.com/advisories/36614 http://www.openwall.com/lists/oss-security/2009/09/03/5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.