CVE-2008-1206: Linux Kiss Server

Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days.

Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in an invalid command.

Affected products

• Linux Kiss Server Linux Kiss Server: version 1.2 only

Published 2008-03-08. Last modified 2026-06-16.