{"record":{"id":"local-technique:format-string","title":"Externally controlled format string","type":"Historical concept","snapshot":"historical-seed.json","source_url":"https://seclists.org/bugtraq/1999/Sep/314","description":"Untrusted text used as formatting control can expose or alter process memory.","defensive_context":"Fixed trusted format strings and compiler/static data-flow diagnostics.","publication":{"id":"local-publication:format-string-milestone","entity_type":"Publication","title":"proftpd1.2.0pre6patch","source_url":"https://seclists.org/bugtraq/1999/Sep/314","publication_date":"1999-09-17","publisher":"Bugtraq","credit_display":"Tymm Twillman","credit_role":"specific vulnerability disclosure and patch author"},"mappings":[{"target_id":"CWE-134","relation":"underlying weakness","status":"research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending"}],"uncertainty":"An early located disclosure, not a proven universal first. Newsham2000 and scut/teamteso2001 are separate later expositions.","rights":"Original concise metadata and linked references; no full paper or payload imported","review_status":"Editorial historical seed; conceptual mappings remain explicitly provisional"},"assertions":[],"source_snapshot":null,"notices_url":"https://aol.pm/source-notices.txt","notices":"Source-specific notices: https://aol.pm/source-notices.txt\nCVE terms: https://www.cve.org/Legal/TermsOfUse"}