CVE-2004-0450 Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by....
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| log2mail | = 0.2.2.2 | No fix listed |
| log2mail | = 0.2.5.0 | No fix listed |
| log2mail | = 0.2.5.1 | No fix listed |
| log2mail | = 0.2.5.2 | No fix listed |
References
- felinemenace.org
- 6711 vdb-entry
- 11768 third-party-advisory
- 11769 third-party-advisory
- DSA-513 patch vendor-advisory
- 10460 patch vdb-entry vendor-advisory
- log2mail-syslog-format-string(16311) vdb-entry