Read the docs
TI-2005-00137 Aliases CVE-2005-0158GHSA-fg5x-5cvc-6wxg

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web…

Priority LOW 37Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses.

Why it matters now

EPSS 0.01907 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:bidwatcher:bidwatcher:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.7:*:*:*:*:*:*:*1.1.7VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.8:*:*:*:*:*:*:*1.1.8VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.9:*:*:*:*:*:*:*1.1.9VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.1:*:*:*:*:*:*:*1.1.9.1VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.2:*:*:*:*:*:*:*1.1.9.2VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.0_beta:*:*:*:*:*:*:*1.3.0_betaVulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableBidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.7:*:*:*:*:*:*:* Versions 1.1.7 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.8:*:*:*:*:*:*:* Versions 1.1.8 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.9:*:*:*:*:*:*:* Versions 1.1.9 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.1:*:*:*:*:*:*:* Versions 1.1.9.1 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.1.9.2:*:*:*:*:*:*:* Versions 1.1.9.2 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.0_beta:*:*:*:*:*:*:* Versions 1.3.0_beta Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Bidwatcher
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:bidwatcher:bidwatcher:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.4:*:*:*:*:*:*:*1.3.4VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.5:*:*:*:*:*:*:*1.3.5VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.6:*:*:*:*:*:*:*1.3.6VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.7:*:*:*:*:*:*:*1.3.7VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.8:*:*:*:*:*:*:*1.3.8VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.9:*:*:*:*:*:*:*1.3.9VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.10:*:*:*:*:*:*:*1.3.10VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.11:*:*:*:*:*:*:*1.3.11VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.12:*:*:*:*:*:*:*1.3.12VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.13:*:*:*:*:*:*:*1.3.13VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.14:*:*:*:*:*:*:*1.3.14VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.15:*:*:*:*:*:*:*1.3.15VulnerableBidwatcher
cpe:2.3:a:bidwatcher:bidwatcher:1.3.16:*:*:*:*:*:*:*1.3.16VulnerableBidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.5:*:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.6:*:*:*:*:*:*:* Versions 1.3.6 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.7:*:*:*:*:*:*:* Versions 1.3.7 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.8:*:*:*:*:*:*:* Versions 1.3.8 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.9:*:*:*:*:*:*:* Versions 1.3.9 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.10:*:*:*:*:*:*:* Versions 1.3.10 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.11:*:*:*:*:*:*:* Versions 1.3.11 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.12:*:*:*:*:*:*:* Versions 1.3.12 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.13:*:*:*:*:*:*:* Versions 1.3.13 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.14:*:*:*:*:*:*:* Versions 1.3.14 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.15:*:*:*:*:*:*:* Versions 1.3.15 Vulnerable ·Bidwatcher
  • cpe:2.3:a:bidwatcher:bidwatcher:1.3.16:*:*:*:*:*:*:* Versions 1.3.16 Vulnerable ·Bidwatcher

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0158
  2. 2026-10-03 Alias added: GHSA-fg5x-5cvc-6wxg

References

Patch 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences