CVE-2004-0450

Опубликовано: 06 авг. 2004

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.

Ссылки

http://felinemenace.org/~jaguar/advisories/log2mail.txt
http://osvdb.org/6711
http://secunia.com/advisories/11768
http://secunia.com/advisories/11769
http://www.debian.org/security/2004/dsa-513
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10460
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16311
http://felinemenace.org/~jaguar/advisories/log2mail.txt
http://osvdb.org/6711
http://secunia.com/advisories/11768
http://secunia.com/advisories/11769
http://www.debian.org/security/2004/dsa-513
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10460
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16311

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:log2mail:log2mail:0.2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:log2mail:log2mail:0.2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:log2mail:log2mail:0.2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:log2mail:log2mail:0.2.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08975

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0450

debian

около 21 года назад

Format string vulnerability in the printlog function in log2mail befor ...

GHSA-rxgx-f27q-r49h

github

больше 3 лет назад