Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.Referenceshttp://www.foundstone.com/knowledge/fscan112_advisory.htmlhttp://www.securityfocus.com/bid/4549http://www.iss.net/security_center/static/8895.phphttp://online.securityfocus.com/archive/1/268581
