CVE-2004-1192 Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.
HighCVSS 10.0
EPSS 11.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citadel ux | = 6.07 | No fix listed |
| citadel ux | = 6.08 | No fix listed |
| citadel ux | = 6.23 | No fix listed |
| citadel ux | = 6.24 | No fix listed |
| citadel ux | = 6.26 | No fix listed |
| citadel ux | = 6.27 | No fix listed |