Externally controlled format string
Historical concept · local-technique:format-string
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Untrusted text used as formatting control can expose or alter process memory.
Fixed trusted format strings and compiler/static data-flow diagnostics.
An early located disclosure, not a proven universal first. Newsham2000 and scut/teamteso2001 are separate later expositions.
Documented publication credit
proftpd1.2.0pre6patch — Tymm Twillman (specific vulnerability disclosure and patch author). This is a publication record, not an origin or invention claim.
Inspect structured metadata and provenance
{
"id": "local-technique:format-string",
"title": "Externally controlled format string",
"type": "Historical concept",
"snapshot": "historical-seed.json",
"source_url": "https://seclists.org/bugtraq/1999/Sep/314",
"description": "Untrusted text used as formatting control can expose or alter process memory.",
"defensive_context": "Fixed trusted format strings and compiler/static data-flow diagnostics.",
"publication": {
"id": "local-publication:format-string-milestone",
"entity_type": "Publication",
"title": "proftpd1.2.0pre6patch",
"source_url": "https://seclists.org/bugtraq/1999/Sep/314",
"publication_date": "1999-09-17",
"publisher": "Bugtraq",
"credit_display": "Tymm Twillman",
"credit_role": "specific vulnerability disclosure and patch author"
},
"mappings": [
{
"target_id": "CWE-134",
"relation": "underlying weakness",
"status": "research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending"
}
],
"uncertainty": "An early located disclosure, not a proven universal first. Newsham2000 and scut/teamteso2001 are separate later expositions.",
"rights": "Original concise metadata and linked references; no full paper or payload imported",
"review_status": "Editorial historical seed; conceptual mappings remain explicitly provisional"
}Explicit source assertions (0)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.