Vulnerability CVE-2004-0451
Published: 2004-12-06   Modified: 2012-02-12

Description:
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
SUP -> SUP 
Debian -> Debian linux 

 References:
http://xforce.iss.net/xforce/xfdb/16459
http://www.securityfocus.com/bid/10571
http://www.debian.org/security/2004/dsa-521
http://securitytracker.com/id?1010539
Copyright 2024, cxsecurity.com

 

Back to Top