CVE-2004-0451

Опубликовано: 06 дек. 2004

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

Ссылки

http://securitytracker.com/id?1010539
http://www.debian.org/security/2004/dsa-521
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10571
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459
http://securitytracker.com/id?1010539
http://www.debian.org/security/2004/dsa-521
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10571
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16459

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sup:sup:1.8:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

EPSS

Процентиль: 87%

0.03657

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0451

debian

больше 20 лет назад

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, ...

GHSA-6h6g-p926-x7hr

github

больше 3 лет назад