CVE-2004-1628 Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.
HighCVSS 9.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pizzashack rssh | < 2.2.2 | 2.2.2 |
References
- 20041023 rssh: pizzacode security alert mailing-list third-party-advisory
- 12954 third-party-advisory
- GLSA-200410-28 third-party-advisory vendor-advisory
- www.pizzashack.org vendor-advisory
- rssh-format-string(17831) vdb-entry