CVE-2003-1236 Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
HighCVSS 10.0
EPSS 15.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tanne | = 0.6.17 | No fix listed |
References
- 20030107 [INetCop Security Advisory] Remote format string vulnerability in Tanne. exploit mailing-list patch
- 7831 third-party-advisory
- tanne.fluxnetz.de patch
- tanne-logger-format-string(11006) vdb-entry
- 20030107 [INetCop Security Advisory] Remote format string vulnerability in Tanne. exploit mailing-list patch
- 20030108 Tanne Remote format string exploit (Proof of Concept) exploit mailing-list
- 6553 exploit patch vdb-entry
- 1005900 vdb-entry