CVE catalog

CVE-2005-3150

weex: CVE-2005-3150

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
2.63% · Oct 25, 2026

Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianweexsid2.8.4.5+nmu1fixed
Debianweexforky2.8.4.5+nmu1fixed
Debianweextrixie2.8.4.4fixed
Debianweexbookworm2.8.4.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianweexsourcesid2.6.1-6sarge1mediumNot reported[332424]
Debianweexsourceforky2.6.1-6sarge1mediumNot reported[332424]
Debianweexsourcetrixie2.6.1-6sarge1mediumNot reported[332424]
Debianweexsourcebookworm2.6.1-6sarge1mediumNot reported[332424]

[Debian bug #332424]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [weex]Fixed
    Details (2)

    • 2.8.4.2 · amd64 · bookworm

      Fixed · Fixed: 2.6.1-6sarge1

      dsa · weex · debian · bookworm; dsa · weex · debian · 12

    • 2.8.4.2 · arm64 · bookworm

      Fixed · Fixed: 2.6.1-6sarge1

      dsa · weex · debian · bookworm; dsa · weex · debian · 12

[Debian 13 (Trixie)]

  • [weex]Fixed
    Details (2)

    • 2.8.4.4 · amd64 · trixie

      Fixed · Fixed: 2.6.1-6sarge1

      dsa · weex · debian · 13

    • 2.8.4.4 · arm64 · trixie

      Fixed · Fixed: 2.6.1-6sarge1

      dsa · weex · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]