CVE-2005-3995: Sobexsrv

Medium severity, CVSS 5.1. EPSS: 4.4% chance of exploitation in the next 30 days.

Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands.

Affected products

• Sobexsrv Sobexsrv: up to and including 1.0.0_pre3

Published 2005-12-05. Last modified 2026-06-16.