Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2004-0536

Опубликовано: 06 авг. 2004
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tripwire:tripwire:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:2.3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:3.0:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:4.0:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:tripwire:tripwire:4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00085
Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2004-0536

ubuntu
около 21 года назад

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

redhat логотип

CVE-2004-0536

redhat
около 21 года назад

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

debian логотип

CVE-2004-0536

debian
около 21 года назад

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, ...

github логотип

GHSA-wwfg-grx5-fq38

github
больше 3 лет назад

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

EPSS

Процентиль: 25%
0.00085
Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other