CVE-2004-0834 Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
HighCVSS 7.2
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mandrakesoft mandrake multi network firewall | = 8.2 | No fix listed |
| speedtouch usb driver | = 1.0 | No fix listed |
| speedtouch usb driver | = 1.1 | No fix listed |
| speedtouch usb driver | = 1.2 | No fix listed |
| speedtouch usb driver | = 1.2_beta1 | No fix listed |
| speedtouch usb driver | = 1.2_beta2 | No fix listed |
| speedtouch usb driver | = 1.2_beta3 | No fix listed |
| speedtouch usb driver | = 1.3 | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| mandrakesoft mandrake linux | = 8.2 | No fix listed |
| mandrakesoft mandrake linux | = 9.0 | No fix listed |
| mandrakesoft mandrake linux | = 9.1 | No fix listed |
| mandrakesoft mandrake linux | = 9.2 | No fix listed |
| mandrakesoft mandrake linux | = 10.0 | No fix listed |
| mandrakesoft mandrake linux | = 10.1 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 2.1 | No fix listed |
References
- sourceforge.net
- speedtouch.sourceforge.net vendor-advisory
- www.mail-archive.com
- speedtouch-format-string(17792) vdb-entry