CVE-2004-0450

CVE-2004-0450

EPSS 4.7%

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://felinemenace.org/~jaguar/advisories/log2mail.txt http://osvdb.org/6711 http://secunia.com/advisories/11768 http://secunia.com/advisories/11769 https://exchange.xforce.ibmcloud.com/vulnerabilities/16311 http://www.debian.org/security/2004/dsa-513 http://www.securityfocus.com/bid/10460