CVE-2004-0353 Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU anubis | = 3.6.0 | No fix listed |
| GNU anubis | = 3.6.1 | No fix listed |
| GNU anubis | = 3.6.2 | No fix listed |
| GNU anubis | = 3.9.92 | No fix listed |
| GNU anubis | = 3.9.93 | No fix listed |
References
- [bug-anubis] 20040228 Important security update mailing-list
- 20040304 GNU Anubis buffer overflows and format string bugs mailing-list
- 20040310 GNU Anubis 3.6.2 remote root exploit mailing-list
- 9772 exploit patch vdb-entry vendor-advisory
- anubis-ident-bo(15345) vdb-entry