Vulnerability CVE-2004-0354

Vulnerability CVE-2004-0354

Published: 2004-11-23 Modified: 2012-02-12

Description:

Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
GNU -> Anubis

References:

http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html

http://marc.info/?l=bugtraq&m=107843915424588&w=2

http://www.securityfocus.com/bid/9772

http://xforce.iss.net/xforce/xfdb/15346

Copyright 2024, cxsecurity.com